lov-optimize-tauri-backend
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from local repository files, including Rust source code, package configuration, and agent-specific files like AGENTS.md, using search tools like 'rg' and 'wc'. This ingestion of untrusted data creates a potential surface for indirect prompt injection attacks.
- Ingestion points: Reading and processing file content from the 'src-tauri' and 'src' directories.
- Boundary markers: The instructions do not define specific delimiters or isolation techniques for ingested data, which may allow embedded malicious instructions in the source code to affect agent logic.
- Capability inventory: The skill has permissions to execute shell commands ('cargo', 'tsc', 'find', 'rg') and modify repository files.
- Sanitization: No explicit sanitization or filtering of external content is mandated before processing.
Audit Metadata