rust-wasm-geo
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents patterns for processing GeoJSON data through a Rust/WASM boundary. This creates a potential surface for indirect prompt injection or data-driven exploits if the input data is attacker-controlled. However, the skill provides specific mitigation guidance, including the use of Zod for schema validation on the JavaScript side and clear boundary management using JSON serialization.
- [DYNAMIC_EXECUTION]: The skill describes the dynamic loading and initialization of WebAssembly modules using the Vite
wasm()plugin and theinit()function fromwasm-pack. This is a standard and required procedure for WebAssembly integration and is implemented using established tools and best practices. - [EXTERNAL_DOWNLOADS]: The skill recommends several domain-specific Rust crates and Node.js packages (e.g.,
geo,rstar,geoarrow-js,zod). These dependencies are appropriate for the geospatial processing use case and originate from well-known repositories or official documentation sources.
Audit Metadata