tauri-app-wasm
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided descriptions of computational workloads to generate integration plans and performance checklists. It lacks explicit boundary markers or instructions to sanitize user input, creating a surface where malicious instructions embedded in technical requirements could influence the agent's output.
- Ingestion points: User queries regarding "high-performance frontend computation" and "WASM vs IPC trade-offs" identified in the 'When to use this skill' section of
SKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded instructions within user data are present.
- Capability inventory: The skill provides examples in
usage.mdusing Tauri'sinvokeandemitAPIs, and includes a capability definition incapabilities.jsonwithcore:defaultpermissions. - Sanitization: No input sanitization or validation logic is defined for the requirement analysis phase.
- [EXTERNAL_DOWNLOADS]: The skill references external third-party resources for implementation guidance and code dependencies.
- Evidence:
SKILL.mdcontains links to a community GitHub repository (p1mo/tauri-wasm) and mentions thetauri-wasmcrate. It also links to technical articles on platforms such as Zhihu and CSDN. These resources are community-maintained rather than originating from official framework or trusted vendor repositories.
Audit Metadata