tauri-app-creator
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of standard development tools including package managers (npm, pnpm, bun, cargo) and curl to execute the official create-tauri-app initialization workflow. These are standard practices for the described development task.
- [EXTERNAL_DOWNLOADS]: All external links provided in the skill point to the official Tauri documentation domain at v2.tauri.app. These are recognized as well-known technology service resources used for providing authoritative framework guidance.
- [SAFE]: An analysis for indirect prompt injection was performed on the skill's template files.
- Ingestion points: User-provided inputs for project metadata (e.g., project_name, frontend, pm) are interpolated into the templates/basic.md file.
- Boundary markers: Absent; the template does not utilize delimiters to isolate user-provided strings from instruction text.
- Capability inventory: the skill defines the workflow for project creation which involves executing shell commands via package managers and cargo as described in SKILL.md.
- Sanitization: No explicit sanitization or input validation logic is present in the skill instructions to filter user-supplied template values.
Audit Metadata