tauri-desktop
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official Tauri 2.0 dependencies and plugins (e.g.,
tauri-plugin-fs,tauri-plugin-updater,tauri-plugin-shell) within theCargo.tomland frontend imports. These are well-known, legitimate components of the Tauri ecosystem used for building cross-platform applications. - [COMMAND_EXECUTION]: Documentation provides examples of Tauri's Inter-Process Communication (IPC) mechanism (
invoke). The Rust-side code snippets demonstrate standard file system operations (std::fs::read_to_string,std::fs::write) and application directory management. These examples are pedagogical and represent typical desktop application functionality. - [DATA_EXPOSURE]: The skill includes an example of a file reading command (
read_file) that takes a path from the frontend. While raw path input is an attack surface, the skill includes a dedicated 'Security Model' section that explicitly advocates for Tauri's capability-based permissions to scope filesystem access (e.g., restricting to$APPDATA/**), adhering to security best practices for the framework.
Audit Metadata