cli-forge-intake
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute standard Rust toolchain commands (
cargo build,cargo test,cargo clippy,cargo fmt) to verify the integrity and correctness of the scaffolded projects. These commands are executed locally within the project directory. - [EXTERNAL_DOWNLOADS]: The project templates include dependencies on established Rust libraries such as
clap,serde, andanyhow. These packages are sourced from the official crates.io registry during the build process, which is standard practice for Rust development. - [PROMPT_INJECTION]: The skill implements input validation for the
skill_nameparameter using a restrictive regular expression ([a-z][a-z0-9]*(-[a-z0-9]+)*). This prevents the injection of malicious characters or command sequences through project configuration fields.
Audit Metadata