tauri-updater
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical guide for implementing auto-update functionality in Tauri 2 desktop applications using official plugins.
- [EXTERNAL_DOWNLOADS]: The skill identifies and uses official Tauri ecosystem packages (@tauri-apps/plugin-updater and @tauri-apps/plugin-process) and standard GitHub Release URL patterns for update manifests. These references target well-known and trusted services.
- [COMMAND_EXECUTION]: Provides standard development instructions using Bun and Cargo for application building and signing. The use of 'jq' in CI pipelines for manifest generation is a routine automation practice.
- [CREDENTIALS_UNSAFE]: While the skill discusses the generation and handling of private signing keys, it correctly advises storing them as GitHub Secrets and distinguishes between public and private components, aligning with secure development lifecycle best practices.
Audit Metadata