rust-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to review and refactor Rust source code, which involves processing untrusted data. This processing creates a potential attack surface for indirect prompt injection where malicious content within the code could influence the agent's behavior.
- Ingestion points: The skill analyzes user-provided Rust source files during development and review workflows (SKILL.md).
- Boundary markers: The skill does not provide specific delimiters or instructions to ignore embedded commands within the source code being analyzed.
- Capability inventory: The skill utilizes
Bashfor standard Rust tools (cargo, rustc, clippy, rustfmt) and has permissions to modify files (Write, Edit). - Sanitization: No sanitization or validation of the input source code is mentioned or implemented in the skill instructions.
Audit Metadata