tauri-app-localhost
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The usage examples in
examples/usage.mdreference the packagetauri-plugin-localhost. This name does not follow the official Tauri v2 plugin naming convention (@tauri-apps/plugin-localhost), which could lead to the installation of an unverifiable or outdated third-party dependency.\n- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to interface with local services and development servers, which serves as a potential vector for untrusted data ingestion.\n - Ingestion points: Accessing localhost services and dev servers as described in
SKILL.md.\n - Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within service responses.\n
- Capability inventory: The skill utilizes
invokefor plugin commands andemitfor event handling as shown inexamples/usage.md.\n - Sanitization: No validation or sanitization logic is provided for data originating from local ports before it is processed by the agent.
Audit Metadata