High-risk tools in Tauri Plugin
6 of the 13 tools in Tauri Plugin are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
execute_jsExecuteExecutes arbitrary JavaScript in a webview. Returns the result of the last statement or promise resolution. This is the universal escape hatch — use it for anything not covered ...
-
navigateExecuteControls webview navigation.
-
clickExecuteClicks at a position in the webview. Provide x/y coordinates directly, or provide a selector (ref from query_page map mode, or id/class/tag/text) to auto-resolve coordinates. Fo...
-
manage_windowExecuteManages windows, zoom, devtools, and webview state. Window actions: list, focus, minimize, maximize, unmaximize, close, show, hide, set_position, set_size, center, toggle_fullsc...
-
mouse_actionExecutePerforms non-click mouse actions.
-
type_textExecuteTypes text into the page. Three modes: (1) Provide
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.