tauri-updater

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill registers a runtime updater endpoint that fetches https://github.com///releases/latest/download/latest.json (and the release artifact URLs in the generated manifest), which the updater uses to decide and download/install remote artifacts, so external content directly controls runtime update behavior.