rust-review
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous shell command patterns for auditing Rust code, including the use of
ripgrepfor pattern matching,awkfor text processing, andcargosubcommands (clippy,audit,mutants,tree) for deep analysis. These are standard tools for the skill's intended purpose of code review. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted Rust source code files. While this creates a potential attack surface for indirect prompt injection, it is the fundamental purpose of a code review tool, and no specific vulnerabilities were identified in the analysis logic itself.
- [SAFE]: All external URLs identified in the documentation point to well-known technical blogs, academic papers, or educational videos related to Rust development and concurrency. No suspicious downloads or remote execution from untrusted sources were detected.
Audit Metadata