tauri

Pass

Audited by Gen Agent Trust Hub on Aug 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes instructions to download and execute setup scripts from official, well-known sources for the Rust toolchain and the Tauri framework. * Fetches the Rust installation script from sh.rustup.rs via curl | sh in examples/start/installation.md. * Downloads the Tauri project creation script from create.tauri.app via curl in examples/start/installation.md.
  • [COMMAND_EXECUTION]: The documentation provides commands for installing system-level build dependencies and running development workflows. * Uses sudo apt install to install required libraries for Linux development in examples/start/installation.md and examples/start/prerequisites.md. * References standard CLI tools like npm, cargo, and tauri-cli for project management.
  • [INDIRECT_PROMPT_INJECTION]: Several templates use interpolation placeholders for project configuration, which serves as a potential surface for instructions if user input is not validated by the automation tools using these templates. * Ingestion points: Placeholders like {product_name}, {window_title}, and {dev_url} in files such as templates/configuration.md and templates/window.md. * Boundary markers: Absent in the template files. * Capability inventory: The main index (SKILL.md) references sub-skills for filesystem access (tauri-app-file-system) and system command execution (tauri-app-shell). * Sanitization: Not implemented within the static template files.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 29, 2026, 09:05 PM