tauri-app-deep-linking
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to handle external data via deep links and custom URL schemes, which creates a surface for indirect prompt injection if incoming payloads are not properly sanitized.
- Ingestion points: External URLs and deep link parameters processed by the application (SKILL.md).
- Boundary markers: The skill explicitly instructs to "Validate and sanitize all external link payloads" and provides an "Input validation checklist" (SKILL.md).
- Capability inventory: The skill enables routing parameters to the frontend and emitting events using Tauri APIs (examples/usage.md).
- Sanitization: Explicit sanitization and validation are required by the skill's instructions (SKILL.md).
Audit Metadata