tauri

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill documents the official installation method for the Rust toolchain by downloading and executing a script from https://sh.rustup.rs. This is a well-known and standard procedure for setting up a Rust development environment.- [EXTERNAL_DOWNLOADS]: The documentation recommends cloning a community project template for Nuxt and Tauri integration from https://github.com/NicolaSpadari/nuxtor.git.- [PRIVILEGE_ESCALATION]: The guide for Linux development setup includes sudo apt install commands to install system-level dependencies required for WebView functionality.- [COMMAND_EXECUTION]: The skill provides numerous examples of shell commands used during development, such as npm create tauri-app, cargo install tauri-cli, and bun run dev.- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates patterns for building applications that ingest data from external sources, which represents a potential attack surface.
  • Ingestion points: Functions documented in references/rust-backend.md that fetch data from external URLs using reqwest or read from the local file system using std::fs.
  • Boundary markers: Not present in the instructional code snippets.
  • Capability inventory: Documentation covers a wide range of capabilities including file system access, network requests, and system-level window management.
  • Sanitization: Code examples show basic validation logic (e.g., checking for empty strings) but do not provide comprehensive sanitization for content processed by AI agents.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 07:28 PM
Security Audit — agent-trust-hub — tauri