lint-rust
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard Rust toolchain commands including
cargo clippy,cargo audit,cargo deny, andcargo machete. These operations are limited to the scope of Rust project maintenance. - [EXTERNAL_DOWNLOADS]: The skill references several third-party cargo plugins. The prerequisites section guides the user to install tools from official and well-known sources within the Rust ecosystem (crates.io and official GitHub repositories).
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface as it processes external project files (source code and manifest files) during analysis.
- Ingestion points: Rust source files and dependency manifests (Cargo.toml, Cargo.lock) processed by linting tools.
- Boundary markers: N/A
- execution happens via shell commands.
- Capability inventory: File system access and read capabilities via the cargo toolchain.
- Sanitization: Relies on the inherent security of the underlying Rust tools (clippy, cargo-audit).
Audit Metadata