tauri-capabilities

Define and apply granular security capabilities for Tauri apps.

309|58|Updated Apr 16, 2026
One-click install
npx skills add https://github.com/bkywksj/knowledge-base --skill tauri-capabilities-bkywksj
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: tauri-capabilities
Source: https://github.com/bkywksj/knowledge-base/tree/main/.claude/skills/tauri-capabilities
Command: npx skills add https://github.com/bkywksj/knowledge-base --skill tauri-capabilities-bkywksj

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Tauri 应用在安全边界和权限边界上经常缺乏一致的策略,导致权限过度暴露、跨窗口权限不一致以及难以维护的安全配置。

Core Features & Use Cases

  • 按窗口粒度定义 Capability,以便为主窗口、设置窗口等分配不同的权限集。
  • 通过 scope 与 allow/deny 策略对文件、系统 API 等资源进行细粒度控制。
  • 支持自定义 Capability 组,便于在大型应用中复用统一的安全策略。
  • Use Case: 对多窗口应用中敏感操作如文件读写、网络访问等进行严格审查。

Quick Start

Configure and apply granular capabilities to control window-specific permissions for a Tauri app.

Frequently Asked Questions about tauri-capabilities

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure per-window permissions in a Tauri app?

To configure per-window permissions in a Tauri app, define granular security capabilities that map identifiers to specific window scopes. This allows you to assign distinct permission sets to your main and settings windows.

What is scope-based access control for Tauri desktop applications?

Scope-based access control in Tauri uses allow and deny strategies to apply fine-grained restrictions on resources like files and system APIs. This ensures precise validation during startup and runtime.

How can I prevent excessive permission exposure across multiple Tauri windows?

Prevent excessive permission exposure by defining custom capability groups that assign targeted permission sets to individual windows. This solves inconsistent security boundaries and maintains unified policies in large applications.

Does Tauri support runtime validation for window-specific security capabilities?

Yes, Tauri supports validation for window-specific security capabilities during both startup and runtime. This ensures scope-based access and API permissions remain strictly enforced throughout the application lifecycle.

How do I restrict file read and write access in multi-window Tauri applications?

Restrict file read and write access in multi-window Tauri applications by applying scope-based capabilities with allow and deny policies. This provides fine-grained control over system API resources for each specific window.