tauri-app-creator
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill uses templates that interpolate user-supplied data into the agent's context without adequate protections.
- Ingestion points: The file
templates/basic.mduses placeholders{project_name},{frontend},{pm}, and{dev_url}for user input. - Boundary markers: The templates do not employ delimiters or explicit instructions to prevent the agent from interpreting placeholder content as new instructions.
- Capability inventory: The skill's primary function involves assisting users in executing shell commands for project scaffolding and development.
- Sanitization: The provided files show no evidence of input validation or escaping for the template variables.
- [COMMAND_EXECUTION]: The skill facilitates the use of standard development tools and commands for project initialization.
SKILL.mdincludes guidance on usingnpm,pnpm,bun,cargo, andcurlto scaffold Tauri v2 projects, which is consistent with official Tauri documentation and the skill's intended purpose.
Audit Metadata