rust-database
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices for database interactions. It explicitly mandates the use of bound parameters for all queries to prevent SQL injection and requires the use of allowlists for dynamic identifiers.
- [SAFE]: External documentation links point to well-known and trusted sources, including official Rust documentation, SQLx, Diesel, SeaORM, and PostgreSQL resources.
- [COMMAND_EXECUTION]: The skill includes standard Rust development commands (rustc, cargo metadata, cargo test, cargo clippy) used for environment baseline checks and code validation. These commands are safe and appropriate for the skill's purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill addresses the processing of external database requirements and schemas.
- Ingestion points: User-provided database requirements, SQL code, and schema definitions (referenced in SKILL.md and references/access-stack-and-types.md).
- Boundary markers: The skill instructs the agent to define primary keys and domain semantics as invariants, and to use application services to wrap transactions, isolating business logic from raw data access.
- Capability inventory: The skill uses standard Rust tooling (cargo) for testing and metadata, and accesses the local filesystem for migration scripts and schema definitions.
- Sanitization: The instructions mandate query parameterization, restrict column selection, and require filtering dynamic identifiers through allowlists to prevent injection attacks.
Audit Metadata