tauri-app-clipboard
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references documentation and plugin information from the official Tauri Project domains (v2.tauri.app).
- [INDIRECT_PROMPT_INJECTION]: The skill implements clipboard read/write capabilities, which represent a vulnerability surface where malicious content on the clipboard could attempt to influence the agent's behavior.
- Ingestion points: The skill uses the
readText()function inexamples/usage.mdto retrieve data from the system clipboard into the agent's environment. - Boundary markers: The skill instructions recommend mitigating risks by using a 'User-initiated flow checklist' and stating that the agent should 'Restrict access to user-initiated actions only'.
- Capability inventory: The skill provides full access to read, write, and clear text on the system clipboard using the
@tauri-apps/plugin-clipboard-managerplugin. - Sanitization: The guidance emphasizes permission control and explicit user-initiated access to prevent unauthorized or automated clipboard operations.
Audit Metadata