tauri
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to download and execute setup scripts from official, well-known sources for the Rust toolchain and the Tauri framework. * Fetches the Rust installation script from
sh.rustup.rsviacurl | shinexamples/start/installation.md. * Downloads the Tauri project creation script fromcreate.tauri.appviacurlinexamples/start/installation.md. - [COMMAND_EXECUTION]: The documentation provides commands for installing system-level build dependencies and running development workflows. * Uses
sudo apt installto install required libraries for Linux development inexamples/start/installation.mdandexamples/start/prerequisites.md. * References standard CLI tools likenpm,cargo, andtauri-clifor project management. - [INDIRECT_PROMPT_INJECTION]: Several templates use interpolation placeholders for project configuration, which serves as a potential surface for instructions if user input is not validated by the automation tools using these templates. * Ingestion points: Placeholders like
{product_name},{window_title}, and{dev_url}in files such astemplates/configuration.mdandtemplates/window.md. * Boundary markers: Absent in the template files. * Capability inventory: The main index (SKILL.md) references sub-skills for filesystem access (tauri-app-file-system) and system command execution (tauri-app-shell). * Sanitization: Not implemented within the static template files.
Audit Metadata