lov-install-tauri-logo
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could potentially influence agent behavior if that data contains embedded instructions. * Ingestion points: The skill reads project-specific Tauri configuration files, Rust source files, and user-provided image assets as part of the icon installation workflow (identified in SKILL.md Workflow step 2). * Boundary markers: There are no explicit instructions or delimiters defined to isolate the content of external configuration files from the agent's prompt context. * Capability inventory: The skill has capabilities to read and write to the file system, generate image assets, and modify Rust resource paths (identified in SKILL.md Workflow steps 2, 4, and 5). * Sanitization: The skill does not explicitly describe sanitization or validation routines for the textual content of the configuration files it processes before they enter the agent's context.
Audit Metadata