tauri-v2
Fail
Audited by Socket on Mar 11, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The Tauri v2 Development Skill is coherently aligned with its stated purpose of teaching and scaffolding Tauri-based development. However, it includes an explicit download-and-run pattern for installing Rust (curl | sh) from an external source, which is a notable supply-chain/safety risk for automated agents. While these installations are common in developer workflows, the presence of unverifiable binaries and shell-based downloads warrants caution and elevates the risk profile. Overall, the skill is BENIGN with caveats; treat the install steps as potential risk vectors in automated contexts and prefer pinned, signed installers or official package manager usage when possible.
Confidence: 98%
Audit Metadata