tauri-build
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official documentation and distribution guides from the Tauri v2 website (
v2.tauri.app), covering platforms like macOS, Windows, Linux, Android, and iOS. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection because it ingests and processes untrusted project data related to build pipelines, signing certificates, and application packaging.
- Ingestion points: User-provided inputs and project context triggered by keywords such as 'build', 'release', 'signing', 'distribution', and 'pipeline' in both English and Chinese.
- Boundary markers: None provided; the skill does not explicitly instruct the agent to ignore or delimit instructions found within the processed project files.
- Capability inventory: The skill involves producing platform-specific installers, app bundles, and interacting with the Tauri system via
invokeand event emission (@tauri-apps/api/event). - Sanitization: There are no instructions for sanitizing or validating external configuration files or environment variables before using them in the build process.
Audit Metadata