rust-code-review
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection as it is designed to ingest and process untrusted external data in the form of Rust source code and project manifests.
- Ingestion points: The workflow involves reading 'Cargo.toml' files and '.rs' source files from the user's environment.
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when reading the external file content into the agent's context.
- Capability inventory: The skill is limited to reading files and generating text-based review reports; it does not perform network operations or execute shell commands.
- Sanitization: There is no requirement or implementation for sanitizing or validating the content of the files being reviewed.
- [NO_CODE]: The skill does not contain any executable scripts, binaries, or configuration files that could be used for direct malicious code execution; it is composed solely of markdown documentation and instructions.
Audit Metadata