tauri
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill mentions official Tauri plugins and standard Rust ecosystem libraries. Evidence includes references to @tauri-apps/plugin-fs, @tauri-apps/plugin-dialog, @tauri-apps/plugin-shell, @tauri-apps/plugin-notification, @tauri-apps/plugin-updater, @tauri-apps/plugin-store, and @tauri-apps/plugin-tray, as well as Rust crates aes-gcm and sysinfo.
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a development assistant generating application code from user input, which is a potential surface for indirect prompt injection. 1. Ingestion points: User requests for application features found in SKILL.md examples. 2. Boundary markers: None explicitly mentioned in the instructions. 3. Capability inventory: File system access, system metrics collection, and IPC command implementation across all examples in SKILL.md. 4. Sanitization: The skill emphasizes the use of Tauri's native capability-based security model and CSP headers as protective measures.
Audit Metadata