tauri-agents-review

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
  • [PROMPT_INJECTION]: The skill facilitates the analysis of external, untrusted source code from Tauri projects, which presents a surface for indirect prompt injection attacks.
  • Ingestion points: The agent reads and processes user-provided files such as lib.rs, tauri.conf.json, and frontend source files.
  • Boundary markers: The instructions lack specific boundary markers or 'ignore embedded instruction' warnings to prevent the agent from being misled by malicious content within the analyzed files.
  • Capability inventory: The skill leverages host agent capabilities for file system access and text searching (read_file, grep).
  • Sanitization: No sanitization or filtering of the ingested file content is performed before processing.
  • [SAFE]: No hardcoded credentials, unauthorized network operations, or obfuscation techniques were detected in the skill's content.
  • [SAFE]: There is a metadata discrepancy between the provided author context (Impertio-Studio) and the author listed in the SKILL.md frontmatter (OpenAEC-Foundation). However, this does not appear to be deceptive or malicious.
  • [NO_CODE]: The skill is composed entirely of markdown documentation and guidance checklists, without any bundled scripts or executable code.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 05:33 AM
Security Audit — agent-trust-hub — tauri-agents-review