configuring-tauri-csp
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains only instructional text and JSON configuration examples for Tauri applications. No executable scripts, binaries, or automated tools are included in the package.
- [PROMPT_INJECTION]: No attempts to override agent behavior or bypass safety guidelines were detected. Instructional markers like 'Important' and 'Warning' are used appropriately to highlight security configuration details rather than to influence the underlying model's behavior.
- [DATA_EXFILTRATION]: No sensitive file paths or credential patterns were found. The network references in the text are purely for CSP policy examples (e.g., Google Fonts, example.com) and do not involve data collection or exfiltration.
- [REMOTE_CODE_EXECUTION]: The skill does not include any commands to download or execute external code. It actually provides defensive guidance against remote code execution by recommending that users bundle dependencies and avoid loading scripts from CDNs.
- [DYNAMIC_EXECUTION]: While the text mentions CSP directives like 'unsafe-eval' and 'wasm-unsafe-eval', it does so in an educational context, warning against their use or explaining their necessity for specific frameworks (like WebAssembly). It does not perform any dynamic code generation or execution itself.
Audit Metadata