autor3search-rust
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs the
autor3search-rustpackage usingcargo install --locked. This tool is provided by the skill's author. - [COMMAND_EXECUTION]: The skill executes various shell commands, including
cargo install,gitoperations (status, add, commit, reset), and several subcommands of theautor3search-rustutility (init,doctor,baseline,report). - [INDIRECT_PROMPT_INJECTION]: The instructions mandate that the agent read a file named
program.mdfrom the target repository and treat it as the primary instruction set for the remainder of the session, following it "exactly." - Ingestion points: The
program.mdfile located in the user's repository. - Boundary markers: None. The skill does not provide delimiters or warnings to ignore potentially malicious instructions within the external file.
- Capability inventory: The agent has the ability to execute shell commands, install packages, and perform git operations.
- Sanitization: No sanitization or validation of the content within
program.mdis performed before the agent is instructed to follow it.
Audit Metadata