rust-review

Pass

Audited by Gen Agent Trust Hub on Nov 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides numerous shell command patterns for auditing Rust code, including the use of ripgrep for pattern matching, awk for text processing, and cargo subcommands (clippy, audit, mutants, tree) for deep analysis. These are standard tools for the skill's intended purpose of code review.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted Rust source code files. While this creates a potential attack surface for indirect prompt injection, it is the fundamental purpose of a code review tool, and no specific vulnerabilities were identified in the analysis logic itself.
  • [SAFE]: All external URLs identified in the documentation point to well-known technical blogs, academic papers, or educational videos related to Rust development and concurrency. No suspicious downloads or remote execution from untrusted sources were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 9, 2026, 07:25 PM