tauri

No malicious behavior or supply-chain attack indicators are present. The fragment is legitimate IPC documentation. However, if the shown commands are used with untrusted frontend content, `fetch_data` may enable SSRF and `read_file` may enable arbitrary local file disclosure because neither input is restricted. These are application-level security risks requiring validation, allowlists, and appropriate Tauri capability controls.