tauri-js-runtime
Integrates JavaScript runtime capabilities into Tauri desktop apps, enabling type-safe RPC and process management with Bun, Node.js, or Deno.
Install this skill
Security score
The tauri-js-runtime skill was audited on May 31, 2026 and we found 14 security issues across 2 threat categories, including 1 critical. Review the findings below before installing.
Categories Tested
Security Issues
Direct command execution function call
| 169 | await spawn("my-worker", { runtime: "bun", script: "bun-worker.ts", cwd }); |
Direct command execution function call
| 211 | await spawn("compiled-worker", { sidecar: "bun-worker" }); |
Direct command execution function call
| 240 | | `spawn(name, config)` | Start a named process | |
Direct command execution function call
| 295 | let mut child = cmd.spawn().map_err(|e| e.to_string())?; |
Direct command execution function call
| 302 | async_runtime::spawn(async move { |
Direct command execution function call
| 312 | async_runtime::spawn(async move { |
Direct command execution function call
| 331 | async_runtime::spawn(async move { |
Direct command execution function call
| 519 | await spawn("backend", { sidecar: "backend" }); |
Direct command execution function call
| 535 | await spawn("worker", { runtime: "bun", script }); |
Template literal with variable interpolation in command context
| 118 | async echo(msg) { return `[bun] ${msg}`; }, |
Template literal with variable interpolation in command context
| 134 | async echo(msg) { return `[node] ${msg}`; }, |
Template literal with variable interpolation in command context
| 151 | async echo(msg) { return `[deno] ${msg}`; }, |
External URL reference
| 541 | - [Tauri v2 Plugin Guide](https://tauri.app/develop/plugins/) |
External URL reference
| 542 | - [Tauri v2 Capabilities](https://tauri.app/security/capabilities/) |