jenkins-rust-acrazie
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted repository configuration files (e.g., Cargo.toml, Cargo.lock), which represents an attack surface for indirect prompt injection.
- Ingestion points: Configuration files like Cargo.toml and rust-toolchain specified in SKILL.md.
- Boundary markers: No explicit markers are used to separate user data from instructions.
- Capability inventory: The skill is strictly limited to read-only analysis and lacks tools for modification or exfiltration.
- Sanitization: No data sanitization is mentioned.
- [SAFE]: The skill operates in a read-only interpretation mode for Rust codebases and explicitly prohibits file system modifications, credential management, and deployment orchestration. The identification of Cargo cache paths is for CI/CD optimization and does not target sensitive user secrets.
Audit Metadata