tauri-v2
Fail
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the official Rust toolchain installer from the project's setup domain (sh.rustup.rs).
- [REMOTE_CODE_EXECUTION]: Executes the downloaded installation script directly via a shell pipe to configure the development environment.
- [COMMAND_EXECUTION]: Utilizes system package managers and Node.js-based tools to install necessary build dependencies and scaffold project structures.
- [PRIVILEGE_ESCALATION]: Uses sudo to acquire the necessary permissions for installing system-level libraries required for Tauri application development on Linux.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process project files like tauri.conf.json and Rust source code, which could contain malicious instructions if the project environment is compromised.
- Ingestion points: Project-specific files including tauri.conf.json, src-tauri/ source files, and permission/capability manifests.
- Boundary markers: No explicit delimiters or warnings to ignore embedded instructions were identified in the skill documentation.
- Capability inventory: The skill facilitates execution of build commands, system package installation, and project management tasks.
- Sanitization: There is no evidence of content sanitization or validation for the project files ingested by the agent.
Recommendations
- HIGH: Downloads and executes remote code from: https://sh.rustup.rs - DO NOT USE without thorough review
Audit Metadata