similarity-rs

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing several CLI tools including similarity-rs, similarity-ts, similarity-py, similarity-generic, and similarity-md using cargo install with version pins (0.5.0). These are fetched from the official Rust package registry (crates.io), which is a well-known and standard service for the Rust ecosystem.
  • [COMMAND_EXECUTION]: The skill provides shell command recipes for codebase analysis, such as using ripgrep (rg) for pattern searching and cargo doc for inspecting dependency documentation. It also includes instructions for setting up Git pre-commit hooks that involve standard operations like chmod +x on locally created script files.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze a project's source code (typically under ./src). While the output of the duplication analysis tool is used to influence the agent's refactoring recommendations, the tool uses static structural analysis (via tree-sitter) which is not susceptible to interpreting data as instructions. The risk is considered low and intrinsic to the skill's primary purpose of code analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 03:49 AM