tauri-scaffold
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The template in templates/basic.md interpolates user-controlled data such as project name and URLs into the agent context without sanitizing the input or using boundary markers to prevent the agent from interpreting the data as instructions. Ingestion points: templates/basic.md (project_name, dev_url). Boundary markers: Absent. Capability inventory: Execution of project scaffolding commands via create-tauri-app (SKILL.md). Sanitization: No explicit sanitization or validation guidelines are provided for these inputs.
Audit Metadata