tauri-app-store
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill references official Tauri documentation and well-known ecosystem libraries for persistent storage, facilitating standard development workflows.
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for managing application state via a local JSON file, which represents a potential indirect prompt injection surface if the application does not sanitize data retrieved from storage at runtime.
- Ingestion points:
settings.json(referenced intemplates/capabilities.json). - Boundary markers: None explicitly defined in the provided usage examples.
- Capability inventory: Permission to get, set, and save data to the specific
settings.jsonpath via thetauri-plugin-storeIPC (defined intemplates/capabilities.json). - Sanitization: No explicit sanitization is shown in the usage examples, though the skill body provides a safety reminder to avoid hardcoding sensitive information and ensuring environmental variables are correctly set.
Audit Metadata