tauri-impl-testing
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for mocking Inter-Process Communication (IPC) calls using
mockIPC, which constitutes a surface for indirect prompt injection. - Ingestion points: Data enters the agent context through the
argsparameter inmockIPChandlers (found inSKILL.mdandreferences/methods.md), which are populated by frontendinvoke()calls. - Boundary markers: The skill emphasizes the use of
clearMocks()inafterEach()to isolate test state, but it does not provide explicit instructions or markers to delimit untrusted data from the frontend. - Capability inventory: The skill facilitates execution of Rust commands, event emission/listening, and shell command execution via
cargo testandtauri-driver. - Sanitization: There is no mention of sanitizing or validating the arguments received from the IPC mocks before they are processed by the test logic.
- [EXTERNAL_DOWNLOADS]: The skill references the installation of external testing utilities.
- Evidence: It provides instructions to install
tauri-driverusing the commandcargo install tauri-driverto facilitate E2E testing. - [DATA_EXFILTRATION]: The skill includes examples of network operations to external services for testing purposes.
- Evidence: Example 9 in
SKILL.mdand Example 7 inreferences/examples.mddemonstrate making network requests tohttpbin.organd other external URLs using thereqwestandurllibraries. - [COMMAND_EXECUTION]: The skill instructs the agent or user to execute various shell commands to build, test, and install tools.
- Evidence: Includes commands such as
cargo test,npm run tauri build -- --debug, andtauri-driverexecution.
Audit Metadata