similarity-rs
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing several CLI tools including
similarity-rs,similarity-ts,similarity-py,similarity-generic, andsimilarity-mdusingcargo installwith version pins (0.5.0). These are fetched from the official Rust package registry (crates.io), which is a well-known and standard service for the Rust ecosystem. - [COMMAND_EXECUTION]: The skill provides shell command recipes for codebase analysis, such as using
ripgrep(rg) for pattern searching andcargo docfor inspecting dependency documentation. It also includes instructions for setting up Git pre-commit hooks that involve standard operations likechmod +xon locally created script files. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze a project's source code (typically under
./src). While the output of the duplication analysis tool is used to influence the agent's refactoring recommendations, the tool uses static structural analysis (via tree-sitter) which is not susceptible to interpreting data as instructions. The risk is considered low and intrinsic to the skill's primary purpose of code analysis.
Audit Metadata