rust-lombok-macros
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes official Rust development tools including
cargo metadata,cargo tree,cargo check,cargo clippy, andcargo test. These are used to inspect the project environment, verify dependency versions, and validate the generated code through the project's internal test suite. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
lombok-macrosdependency viacargo add. It specifically recommends pinning to a reviewed version (2.0.32) and fetching from the official crates.io registry to maintain supply chain integrity. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by reading local project metadata and source code into the agent's context. While necessary for its function as a code analysis and refactoring tool, it lacks explicit boundary markers for the ingested content.
- Ingestion points: Project structure and metadata are ingested via
cargo metadataandcargo treeas described in the workflow. - Boundary markers: None identified for the tool outputs interpolated into the agent context.
- Capability inventory: The skill can execute project-specific code and macros through
cargo testandcargo clippy. - Sanitization: The instructions do not specify validation or sanitization of the data retrieved from the local project environment.
Audit Metadata