The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill addresses potential injection surfaces inherent in desktop application development, such as IPC communication and deep link handling. It implements a defensive posture by requiring all untrusted input to be validated within the Rust layer.
Ingestion points: references/02-commands-ipc-events.md identifies IPC DTOs as input vectors; references/04-state-offline-sidecars.md identifies deep link protocol payloads and sidecar stdout/stderr as external data sources.
Boundary markers: The skill architecture defines Rust as the "trusted system boundary" (SKILL.md) to isolate privileged operations from the WebView UI.
Capability inventory: references/03-capabilities-security-storage.md and references/04-state-offline-sidecars.md manage capabilities for filesystem access, shell execution, secure storage, and sidecar process spawning.
Sanitization: Explicit instructions in references/02-commands-ipc-events.md ("validate untrusted input in Rust") and references/04-state-offline-sidecars.md ("validate custom protocol payloads") provide the necessary mitigation strategies.
[COMMAND_EXECUTION]: The skill defines standard development lifecycle commands for linting, testing, and building (pnpm test, cargo clippy, pnpm tauri build). These commands are documented as part of the recommended CI/CD verification process in references/05-testing-performance-release.md and are appropriate for the skill's stated purpose.

tauri-desktop-implementation