tauri-app-develop
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill includes a template file
templates/basic.mdthat uses placeholders for shell commands such as{frontend_dev_cmd}and{tauri_dev_cmd}. This design creates a surface for indirect prompt injection where malicious instructions could be injected into the agent's output if the placeholder values are derived from untrusted sources. - Ingestion points: Placeholders in
templates/basic.md({frontend_dev_cmd}, {tauri_dev_cmd}, {log_level}). - Boundary markers: No delimiters or instructions to ignore embedded content are present in the template.
- Capability inventory: The skill provides guidance and templates; it does not contain scripts for direct command execution or network exfiltration.
- Sanitization: No validation or sanitization of placeholder values is defined in the skill's source files.
Audit Metadata