rust-lombok-macros

Pass

Audited by Gen Agent Trust Hub on Jul 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes official Rust development tools including cargo metadata, cargo tree, cargo check, cargo clippy, and cargo test. These are used to inspect the project environment, verify dependency versions, and validate the generated code through the project's internal test suite.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the lombok-macros dependency via cargo add. It specifically recommends pinning to a reviewed version (2.0.32) and fetching from the official crates.io registry to maintain supply chain integrity.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by reading local project metadata and source code into the agent's context. While necessary for its function as a code analysis and refactoring tool, it lacks explicit boundary markers for the ingested content.
  • Ingestion points: Project structure and metadata are ingested via cargo metadata and cargo tree as described in the workflow.
  • Boundary markers: None identified for the tool outputs interpolated into the agent context.
  • Capability inventory: The skill can execute project-specific code and macros through cargo test and cargo clippy.
  • Sanitization: The instructions do not specify validation or sanitization of the data retrieved from the local project environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 21, 2026, 06:57 PM
Security Audit — agent-trust-hub — rust-lombok-macros