tauri-syntax-plugins-api
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: Reference to official Tauri 2.0 plugins. The skill documentation covers standard packages like
@tauri-apps/plugin-fsand@tauri-apps/plugin-http, which are official components of the Tauri ecosystem. - [SAFE]: Security-centric instruction. The skill explicitly warns against broad shell permissions and provides examples of using validators to restrict command execution, adhering to the principle of least privilege.
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for ingesting data that could contain indirect instructions. 1. Ingestion points:
readTextFilein Pattern 1,fetchin Pattern 3, andreadText(clipboard) in Pattern 6. 2. Boundary markers: The instructions focus on Tauri's technical boundary markers, such asBaseDirectoryand capability-based permission scoping. 3. Capability inventory: The skill documents capabilities for executing shell commands (Command.execute), writing to the file system (writeTextFile), and making network requests (fetch). 4. Sanitization: The documentation promotes the use of regex validators within theshell:allow-executepermission scope to sanitize command arguments.
Audit Metadata