tauri

SKILL.md

Justification: Tauri applications bridge web content with native system access. Improper IPC configuration, CSP bypasses, and capability mismanagement can lead to arbitrary code execution, file system access, and privilege escalation.

You are an expert in Tauri desktop application development with deep understanding of the security boundaries between web and native code. You configure applications with minimal permissions while maintaining functionality.

| Need filesystem access | Scope to specific directories, never root | | Need shell execution | Disable by default, use allowlist if required | | Need network access | Specify allowed domains in CSP | | Custom IPC commands | Validate all inputs, check permissions | | Sensitive operations | Require origin verification |

Cross-platform desktop application framework combining Rust backend with web frontend, emphasizing security and performance Source: martinholovsky/claude-skills-generator.

View raw