full-stack-skills/tauri-skills354 installs
tauri-framework-security
Guidance for Tauri v2 security model, baseline hardening, and runtime authority controls.
How do I install this agent skill?
npx skills add https://github.com/full-stack-skills/tauri-skills --skill tauri-framework-securityIs this agent skill safe to install?
- Gen Agent Trust Hubpass
The skill provides legitimate security guidance for Tauri v2 applications based on official documentation. No malicious patterns, obfuscation, or unauthorized data access were detected.
- Socketpass
No alerts
- Snykpass
Risk: LOW · No issues
What does this agent skill do?
When to use this skill
ALWAYS use this skill when the user mentions:
- Tauri v2 security baseline, hardening, or audit / Tauri v2 安全基线、加固或审计
- CSP, HTTP headers, or runtime authority / CSP、HTTP 头或运行时权限
- Capability/Scope design for security posture / 能力与 Scope 的安全设计
Trigger phrases include:
- "security baseline", "hardening", "CSP", "security checklist"
- "安全基线", "安全加固", "权限收敛", "上线审计"
How to use this skill
- Clarify app context: platforms, windows, data sensitivity / 明确平台、窗口与数据敏感度
- Build a capability matrix: feature → plugin → capability → scope / 建立能力矩阵
- Define CSP and HTTP headers per window / 为每个窗口定义 CSP 与 Headers
- Review runtime authority and plugin permissions / 校验运行时权限与插件权限
- Produce a release security checklist and validation plan / 输出上线安全检查清单
Outputs
- Capability matrix with minimal scope / 最小权限能力矩阵
- CSP & headers plan per window / 每个窗口的 CSP 与 Headers 方案
- Release security checklist / 上线安全检查清单
Scope
- Boundary: Tauri v2 security model and baseline hardening / 仅限安全模型与基线
- In scope: Capabilities, Scope, CSP, headers, runtime authority / 权限与运行时控制
- Out of scope: backend auth or server security / 不涉及后端鉴权与服务器安全
References
- https://v2.tauri.app/llms.txt
- https://v2.tauri.app/security/
- https://v2.tauri.app/security/asset-protocol/
- https://v2.tauri.app/security/permissions/
- https://v2.tauri.app/security/scope/
- https://v2.tauri.app/security/capabilities/
- https://v2.tauri.app/security/csp/
- https://v2.tauri.app/security/http-headers/
- https://v2.tauri.app/security/ecosystem/
- https://v2.tauri.app/security/lifecycle/
- https://v2.tauri.app/security/future/
- https://v2.tauri.app/security/runtime-authority/
Keywords
tauri security, csp, headers, permissions, capabilities, runtime authority, 安全基线, 权限收敛, 运行时权限
常见陷阱 (Gotchas)
- 版本兼容性：注意框架版本与依赖库的兼容性，不同版本 API 可能有差异
- 配置文件格式：配置文件格式错误是最常见的问题，建议使用编辑器的语法检查
- 环境变量：确保所有必要的环境变量已正确设置，敏感信息不要硬编码
- 依赖冲突：多版本共存时注意依赖冲突，使用 lock 文件锁定版本
- 性能陷阱：大数据量场景下注意性能优化，避免 N+1 查询等常见问题
使用流程
Step 1: 环境准备
确保开发环境已安装必要的依赖和工具。
Step 2: 配置初始化
根据项目需求进行基础配置。
Step 3: 核心功能使用
按照示例代码实现核心功能。
Step 4: 测试验证
运行测试确保功能正常。
Step 5: 部署上线
完成开发后进行部署和监控。
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/full-stack-skills/tauri-skills/tauri-framework-security">View tauri-framework-security on skillZs</a>