reqwest-rust
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documentation promotes security best practices for HTTP clients, such as mandatory TLS (HTTPS only), explicit timeout configurations, and proper user-agent identification.
- [DYNAMIC_EXECUTION]: The provided helper script
reqwest-rust-bootstrap.shuses a Python subprocess to generate JSON-formatted code snippets. The script uses environment variables to pass data to Python, which is a secure method for handling dynamic content in a local utility intended for boilerplate generation. - [INDIRECT_PROMPT_INJECTION]: While the skill provides templates for parsing external network data (like JSON and byte streams), it explicitly mitigates associated risks by advising developers to enforce response size limits and sanitize sensitive information—such as credentials in URLs—before logging or returning errors.
Audit Metadata