rust-code-review
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security violations were detected. The skill's instructions are focused on legitimate code review tasks using official toolchains.
- [COMMAND_EXECUTION]: The skill utilizes shell commands like
cargo testandcargo checkto verify code correctness. While these commands can execute code from the project being reviewed (such asbuild.rsor test suites), this is a standard and necessary component of a Rust development workflow and is the primary purpose of this skill. - [PROMPT_INJECTION]: The skill acts as an indirect prompt injection surface because it is designed to ingest and analyze untrusted repository code and instructions. However, this is an inherent property of automated code review tools.
- Ingestion points: Changed files, repository manifests, and repository instructions referenced in
SKILL.md. - Boundary markers: Absent; there are no specific delimiters instructing the agent to ignore instructions embedded within the code diffs.
- Capability inventory: Execution of
gitandcargocommands as specified in the Workflow section ofSKILL.md. - Sanitization: Absent; the skill relies on the agent's internal safety filters and the user's provision of the review context.
Audit Metadata