tauri-v2
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive developer assistant for the Tauri v2 framework. All code samples, including Rust backend logic and TypeScript frontend IPC (Inter-Process Communication) patterns, are standard, non-malicious, and follow official Tauri documentation.
- [SAFE]: External downloads and dependencies identified (e.g.,
@tauri-apps/cli,@tauri-apps/api, and the Rusttauricrate) are part of the well-known official Tauri ecosystem. Commands provided for project initialization (e.g.,npm create tauri-app@latest) are the established standard for the technology. - [SAFE]: The
capabilities-reference.mdfile correctly documents Tauri's security model, promoting the use of scoped permissions for the file system and network access to mitigate potential risks in the final application. - [INDIRECT_PROMPT_INJECTION]: As a developer-focused skill that processes user-provided code for debugging and generation, there is an inherent surface for indirect prompt injection if the agent processes malicious code snippets from untrusted sources. However, the skill does not include any specific logic that would facilitate or automate the execution of such injections, and the risk is mitigated by standard LLM guardrails.
Audit Metadata