pi-agent-rust
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from the local repository including source code, shell script logic, and command outputs from tests and linters.
- Ingestion points: The agent reads outputs from
cargo test,rg(ripgrep),shellcheck, and local regression scripts such astests/installer_regression.shandinstall.sh. - Boundary markers: Absent. The instructions do not define specific delimiters or instructions to ignore potential commands embedded within the code or logs being analyzed.
- Capability inventory: The skill utilizes shell execution (via
bash,cargo, andrch), file system modifications, and repository exploration. - Sanitization: Absent. The skill operates directly on raw output and file contents without explicit filtering or sanitization.
- [COMMAND_EXECUTION]: The skill defines several shell command sequences and script executions for environment setup and verification workflows. These include
cargooperations and execution of local shell scripts likeinstall.shandscripts/skill-smoke.sh.
Audit Metadata