Design secure Tauri 2.0 IPC command handlers with validated Rust backend input.
npx skills add https://github.com/Probably-Group/Dev-AID --skill tauri-probably-group
Please help me install this Agent Skill. Skill: tauri Source: https://github.com/Probably-Group/Dev-AID/tree/main/.dev-aid/skills/expert/tauri Command: npx skills add https://github.com/Probably-Group/Dev-AID --skill tauri-probably-group
This Skill helps you build Tauri 2.0 desktop apps safely by preventing common IPC and filesystem vulnerabilities while generating robust Rust backend code patterns.
validator.dunce, avoiding out-of-scope reads/writes.tauri.conf.json (CSP, scoped plugins, and reduced permissions).Use the tauri skill to generate Rust #[tauri::command] handlers that validate inputs, canonicalize any filesystem paths, and return safe error messages for a Tauri 2.0 app.
High-intent search queries and answers about installing and using this skill.
Prevent path traversal in Tauri IPC by canonicalizing untrusted frontend paths and enforcing strict containment within allowed app directories using the dunce crate. This approach ensures out-of-scope filesystem reads and writes are blocked securely.
Validate untrusted frontend input in Tauri Rust backend commands by defining typed request structs and applying validator-based boundary checks directly at the IPC command layer. This ensures malicious data is rejected before native execution.
Configure least-privilege capabilities in tauri.conf.json by applying scoped plugins, reducing default permissions, and implementing CSP hardening. This minimizes the attack surface by restricting native API access strictly to required functionality.
Stop XSS-to-IPC abuse in Tauri 2.0 by enforcing strict input validation at IPC boundaries and applying CSP hardening in tauri.conf.json. Preventing frontend-driven shell construction ensures injected scripts cannot trigger native execution.
Tauri command handlers leak internal details when errors are serialized directly without filtering. Serialize safe, generic error messages and keep secrets in the Rust backend or OS keychain to apply fail-secure defaults and prevent data exposure.
Executing dynamic shell commands from Tauri frontend inputs is an anti-pattern. Enforce injection-resistant execution by using fixed argument execution and strict allowlists rather than allowing frontend-driven shell or command construction.
wfvueImplement secure structured IPC between Tauri frontend and Rust backend.
stardustrainConfigure Tauri v2 apps with Rust backends and web frontends.
martinholovskyAutomate CI/CD pipeline security hardening with GitHub Actions.
JFEspanolitoOutline Electron project structure and secure IPC communication patterns for cross-platform desktop apps.