This walks you through building Tauri desktop apps with security front and center. It's structured around TDD workflows and assumes you know the web/native boundary is dangerous. You get minimal capability configs, CSP lockdowns, IPC command validation patterns, and origin verification checks. The split structure puts CVE details and threat models in separate references since this is tagged HIGH-RISK. If you're shipping a desktop app that wraps web content with Rust, this covers the permission system and common pitfalls like path traversal and shell execution. The patterns show actual validation code, not just principles.
- skills.sh installs
- 553
- GitHub stars
- 48
- last updated
- Aug 21, 2026
Install
$ npx -y skills add martinholovsky/claude-skills-generator --skill tauri --agent claude-codeInstalls into .claude/skills of the current project.
Files
Tauri Desktop Framework Skill
File Organization
This skill uses a split structure for HIGH-RISK requirements:
- SKILL.md: Core principles, patterns, and essential security (this file)
- references/security-examples.md: Complete CVE details and OWASP implementations
- references/advanced-patterns.md: Advanced Tauri patterns and plugins
- references/threat-model.md: Attack scenarios and STRIDE analysis
Validation Gates
Gate 0.1: Domain Expertise Validation
- Status: PASSED
- Expertise Areas: IPC security, capabilities system, CSP, plugin architecture, window management
Gate 0.2: Vulnerability Research (BLOCKING for HIGH-RISK)
- Status: PASSED (5+ CVEs documented)
- Research Date: 2025-11-20
- CVEs Documented: CVE-2024-35222, CVE-2024-24576, CVE-2023-46115, CVE-2023-34460, CVE-2022-46171
Gate 0.5: Hallucination Self-Check
- Status: PASSED
- Verification: All configurations tested against Tauri 2.0
Gate 0.11: File Organization Decision
- Decision: Split structure (HIGH-RISK, ~500 lines main + extensive references)
1. Overview
Risk Level: HIGH
Sponsors
Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthly
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any language
Agent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/martinholovsky/claude-skills-generator
- Categories
- Frontend Development, Backend & APIs, Security, Debugging, Automation & Workflows, Rust, Mobile Development
- First seen
- Jun 3, 2026
More from martinholovsky/claude-skills-generator
All 50- Tailwindcss499
- Rabbitmq Expert498
- Celery Expert458
- Wake Word Detection410
- Web Audio Api406
- Glsl372
- Devsecops Expert364
- Javascript Expert337
- Applescript312
- Macos Accessibility311
- Talos Os Expert286
- Typescript Expert283
- Speech To Text282
- Surrealdb Expert275
- Graph Database Expert270
- Websocket269
- Rust266
- Fastapi Expert265
- Fastapi264
- Async Programming258
- Api Expert257
- Threejs Tresjs253
- Cilium Expert251
- Appsec Expert240
Recommended
More Frontend Development1
cdrf-expertvintasoftware/django-ai-pluginsExpert guidance for Django REST Framework class-based views using Classy DRF (https://www.cdrf.co). Use when selecting or debugging APIView, GenericAPIView, con544skills.sh installs
cdrf-expertvintasoftware/django-ai-pluginsExpert guidance for Django REST Framework class-based views using Classy DRF (https://www.cdrf.co). Use when selecting or debugging APIView, GenericAPIView, con544skills.sh installs2
copilot-sdkintellectronica/agent-skillsThis skill helps with GitHub Copilot SDK work across Node.js/TypeScript, Python, Go, .NET, and Java. It covers setup, authentication, permissions, streaming eve535skills.sh installs
copilot-sdkintellectronica/agent-skillsThis skill helps with GitHub Copilot SDK work across Node.js/TypeScript, Python, Go, .NET, and Java. It covers setup, authentication, permissions, streaming eve535skills.sh installs3
news-summaryzjfls/zhoujie-claude-skills新闻搜索、新闻摘要、新闻汇总、热点新闻、最新新闻、新闻整理、新闻收集。帮你搜索最近几天的相关新闻（12-25条），生成精美的HTML摘要页面，每条新闻都有摘要和AI深度解读功能，自动打开浏览器展示535skills.sh installs
news-summaryzjfls/zhoujie-claude-skills新闻搜索、新闻摘要、新闻汇总、热点新闻、最新新闻、新闻整理、新闻收集。帮你搜索最近几天的相关新闻（12-25条），生成精美的HTML摘要页面，每条新闻都有摘要和AI深度解读功能，自动打开浏览器展示535skills.sh installs4
content-research-writerdavila7/claude-code-templatesAssists in writing high-quality content by conducting research, adding citations, improving hooks, iterating on outlines, and providing real-time feedback on ea533skills.sh installs
content-research-writerdavila7/claude-code-templatesAssists in writing high-quality content by conducting research, adding citations, improving hooks, iterating on outlines, and providing real-time feedback on ea533skills.sh installs5
pdf-designjamditis/claude-skills-journalismDesign and edit professional PDF reports and proposals with local HTML/PDF generation, iterative previews, print layouts, brand systems, and opt-in uploads. Use533skills.sh installs
pdf-designjamditis/claude-skills-journalismDesign and edit professional PDF reports and proposals with local HTML/PDF generation, iterative previews, print layouts, brand systems, and opt-in uploads. Use533skills.sh installs6
wasm-wasmtimemohitmishra786/low-level-dev-skillsWebAssembly runtime skill using wasmtime. Use when running WASM modules with wasmtime CLI, working with WASI preview2, using the component model, embedding wasm532skills.sh installs
wasm-wasmtimemohitmishra786/low-level-dev-skillsWebAssembly runtime skill using wasmtime. Use when running WASM modules with wasmtime CLI, working with WASI preview2, using the component model, embedding wasm532skills.sh installs