rust-desktop-applications
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides technical guidance and code patterns for Rust desktop development. It includes defensive programming examples, such as a path validation function designed to prevent directory traversal attacks, and explicitly warns against common security pitfalls like blocking the main thread or exposing unvalidated commands.\n- [EXTERNAL_DOWNLOADS]: The documentation references the official Rust toolchain installer (rustup.rs) and well-known developer utilities (AppImageKit). These resources are standard in the described development workflow and originate from trusted or established industry sources.\n- [COMMAND_EXECUTION]: Technical examples show how to utilize the Tauri Command API to interact with the host system. The skill provides appropriate context on securing these features using Tauri's capability system to minimize the potential attack surface.\n- [PRIVILEGE_ESCALATION]: The presence of
sudoandchmodin CI/CD and build script examples is consistent with standard platform setup and binary distribution tasks, posing no abnormal risk to the user environment.\n- [INDIRECT_PROMPT_INJECTION]: While the skill describes processing user data in desktop apps, it provides clear sanitization and validation patterns to mitigate injection risks, documenting these as core requirements for production applications.
Audit Metadata