desktop-gui-dev
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Recommends the use of official CLI tools for Tauri, Electron, and Wails. These are installed from well-known registries like npm and Go's module system.
- [COMMAND_EXECUTION]: Directs the agent to run project initialization, development, and build commands (e.g.,
npm start,tauri build,wails build) which are standard for the described application lifecycle. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it requires the agent to ingest untrusted data from local build files, manifests, and source code. Evidence includes: Ingestion points (build files and application manifests), Boundary markers (instructions on maintaining security boundaries in references/electron.md), Capability inventory (file modification and command execution via framework CLIs in references/tauri.md), and Sanitization (explicit instructions to validate external input in references/desktop-architecture.md).
Audit Metadata