The Agent Skills Directory

[SAFE]: The skill is a collection of defensive security best practices and instructions for hardening Tauri v2 applications. Its primary purpose is to guide developers in reducing the attack surface of their desktop applications.
[SAFE]: Instructions for capability management (01-capabilities-permissions.md) correctly emphasize the principle of least privilege and granular scoping, which are standard security best practices.
[SAFE]: Command validation guidelines (02-command-validation.md) correctly identify the frontend-backend trust boundary and mandate server-side (Rust) validation of all inputs to prevent injection and path traversal attacks.
[SAFE]: Secret management recommendations (03-files-shell-secrets.md) discourage storing sensitive information in plaintext or frontend storage, instead recommending OS-native secure storage or Stronghold, aligning with industry standards.
[SAFE]: The supply chain and updater integrity section (04-csp-auth-updater-supply-chain.md) provides valid instructions for artifact signing and Content Security Policy (CSP) implementation to mitigate remote code execution and supply chain risks.
[SAFE]: The reference to itsol-current-tech-context appears to be a tool-based reference to official documentation provided by the author's environment, intended for verifying technical specifications rather than executing untrusted remote code.

tauri-security-capabilities