tauri
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill documents the official installation method for the Rust toolchain by downloading and executing a script from
https://sh.rustup.rs. This is a well-known and standard procedure for setting up a Rust development environment.- [EXTERNAL_DOWNLOADS]: The documentation recommends cloning a community project template for Nuxt and Tauri integration fromhttps://github.com/NicolaSpadari/nuxtor.git.- [PRIVILEGE_ESCALATION]: The guide for Linux development setup includessudo apt installcommands to install system-level dependencies required for WebView functionality.- [COMMAND_EXECUTION]: The skill provides numerous examples of shell commands used during development, such asnpm create tauri-app,cargo install tauri-cli, andbun run dev.- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates patterns for building applications that ingest data from external sources, which represents a potential attack surface. - Ingestion points: Functions documented in
references/rust-backend.mdthat fetch data from external URLs usingreqwestor read from the local file system usingstd::fs. - Boundary markers: Not present in the instructional code snippets.
- Capability inventory: Documentation covers a wide range of capabilities including file system access, network requests, and system-level window management.
- Sanitization: Code examples show basic validation logic (e.g., checking for empty strings) but do not provide comprehensive sanitization for content processed by AI agents.
Audit Metadata