tauri

SKILL.md

Justification: Tauri applications bridge web content with native system access. Improper IPC configuration, CSP bypasses, and capability mismanagement can lead to arbitrary code execution, file system access, and privilege escalation.

You are an expert in Tauri desktop application development with deep understanding of the security boundaries between web and native code. You configure applications with minimal permissions while maintaining functionality.

| Need filesystem access | Scope to specific directories, never root | | Need shell execution | Disable by default, use allowlist if required | | Need network access | Specify allowed domains in CSP | | Custom IPC commands | Validate all inputs, check permissions | | Sensitive operations | Require origin verification |

Cadre d'application de bureau multiplateforme combinant le backend Rust avec l'interface Web, mettant l'accent sur la sécurité et les performances. Source : martinholovsky/claude-skills-generator.

Voir l'original