desktop-framework-tauri
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The documentation includes patterns for using the
tauri-plugin-updaterandtauri-plugin-shellplugins. The updater plugin facilitates the secure download and installation of signed application updates from a remote server. The shell plugin allows for the execution of predefined sidecar binaries and specific system commands. The instructions correctly advocate for the principle of least privilege by requiring explicit command and argument definitions within capability files. - [PERSISTENCE]: The skill describes the
tauri-plugin-autostartplugin, which enables applications to be configured to launch automatically when a user logs in. This is a standard and legitimate feature for desktop applications. - [INDIRECT_PROMPT_INJECTION]: As a development framework guide, the skill acknowledges the vulnerability surface for indirect prompt injection. 1. Ingestion points: User input passed to Rust commands and file content read via the
tauri-plugin-fsplugin. 2. Boundary markers: The skill instructs using JSON capability files to define window-specific permissions. 3. Capability inventory: Full inventory of core capabilities includingshell,fs, andhttpis provided. 4. Sanitization: Explicit guidance on using Content Security Policy (CSP) and granular path variables to sanitize the environment and restrict unauthorized access.
Audit Metadata