tauri-app-shell
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a developer resource for the Tauri framework, providing templates and best practices for secure shell plugin configuration.
- [CREDENTIALS_UNSAFE]: The SKILL.md file includes a 'Gotchas' section that warns against hardcoding sensitive information and provides guidance on managing environment variables securely.
- [PROMPT_INJECTION]: The skill uses templates for shell configurations that interpolate user-defined variables. 1. Ingestion points: Untrusted data enters the context via placeholders like {cmd} and {args_allowlist} in templates/basic.md. 2. Boundary markers: No explicit delimiters are used in the templates. 3. Capability inventory: The skill configures shell:allow-execute and shell:allow-open permissions. 4. Sanitization: While the example templates include 'args: true' (allowing arbitrary arguments), the SKILL.md instructions explicitly direct the agent to 'Apply strict allowlist or regex constraints for arguments' to mitigate injection risks.
Audit Metadata