autor3search-rust

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads and installs the autor3search-rust package using cargo install --locked. This tool is provided by the skill's author.
  • [COMMAND_EXECUTION]: The skill executes various shell commands, including cargo install, git operations (status, add, commit, reset), and several subcommands of the autor3search-rust utility (init, doctor, baseline, report).
  • [INDIRECT_PROMPT_INJECTION]: The instructions mandate that the agent read a file named program.md from the target repository and treat it as the primary instruction set for the remainder of the session, following it "exactly."
  • Ingestion points: The program.md file located in the user's repository.
  • Boundary markers: None. The skill does not provide delimiters or warnings to ignore potentially malicious instructions within the external file.
  • Capability inventory: The agent has the ability to execute shell commands, install packages, and perform git operations.
  • Sanitization: No sanitization or validation of the content within program.md is performed before the agent is instructed to follow it.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 05:38 AM