tauri-devtools

Fail

Audited by Socket on Mar 9, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill is largely coherent with its stated purpose as a development-time debugging tool for Tauri backend components. However, there are notable security considerations due to data flowing from the local app to an external UI domain and the potential leakage of sensitive IPC/config/asset information. The design appropriately restricts instrumentation to debug builds, but the external data sink and visibility of internal payloads introduce non-trivial risk that warrants explicit data-handling policies (masking, least privilege, optional opt-in, and clear user consent). Overall, the skill is BENIGN with elevated SUSPICIOUS signals due to data-exfiltration potential if misconfigured.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 9, 2026, 07:20 PM
Package URL
pkg:socket/skills-sh/yigitkonur%2Fskills-by-yigitkonur%2Ftauri-devtools%2F@28a3499355f0c9570b5d3c19564fcc8bd08ae312