tauri-app-websocket
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to handle external data via WebSocket message events, which constitutes a potential attack surface for indirect prompt injection.
- Ingestion points: WebSocket message events as described in
SKILL.mdand lifecycle handling. - Boundary markers: None specified in the provided instructions to delimit incoming socket data from agent instructions.
- Capability inventory: The skill facilitates communication between the Rust backend and the frontend, including event emission (
emit) and plugin invocations (invoke) as seen inexamples/usage.md. - Sanitization: The instructions recommend general error handling and lifecycle management but do not explicitly detail sanitization or escaping of external message content before it is processed by an LLM.
- [SAFE]: The configuration in
templates/capabilities.jsonuses a standard allowlist approach for development and testing, specifically targetinglocalhostand a well-known public echo service (echo.websocket.org). All referenced domains and packages are official Tauri project resources.
Audit Metadata