tauri-app-stronghold
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official documentation and guidelines from the Tauri framework website (v2.tauri.app). These are well-known and trusted resources for developers using the Tauri framework.
- [COMMAND_EXECUTION]: The skill provides configuration examples and code snippets for the Tauri Stronghold plugin, such as initializing the plugin and defining permissions. It does not contain any arbitrary command execution or suspicious shell scripts.
- [DATA_EXFILTRATION]: No patterns of hardcoded credentials, sensitive file access, or network exfiltration were found. The skill correctly recommends using environment variables instead of hardcoding sensitive information.
- [PROMPT_INJECTION]: The instructions are focused on guiding the agent to implement secure storage practices and do not contain any bypasses, overrides, or jailbreak attempts.
- [OBFUSCATION]: The skill uses clear, plain-text instructions in English and Chinese. No hidden payloads, Base64-encoded commands, or homoglyph attacks were detected.
- [INDIRECT_PROMPT_INJECTION]: While the skill handles sensitive data storage, it does not ingest untrusted external data in a way that creates a prompt injection surface. The scope is limited to guiding the configuration of the Stronghold plugin.
Audit Metadata