rust-semver
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes Rust source files and manifests to determine API changes, which presents an attack surface for instructions embedded in code comments or documentation.\n
- Ingestion points: Rust source code files (e.g.,
src/lib.rs) andCargo.tomlmanifest files processed during analysis.\n - Boundary markers: The instructions do not specify any delimiters or safety markers to distinguish between legitimate code and adversarial prompts in the ingested files.\n
- Capability inventory: The skill executes several CLI tools including
cargo,cargo-semver-checks,cargo-workspaces,cargo-audit, andcargo-denywhich perform file and network operations.\n - Sanitization: There is no evidence of sanitization or validation of the input source code before it is interpreted by the agent.\n- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of third-party Rust development tools from the official crates.io registry.\n
- Tools: The instructions include commands to install
cargo-semver-checks,cargo-workspaces,cargo-audit,cargo-deny,cargo-release, andrelease-plz.\n - Safety: The skill promotes secure installation practices by using the
--lockedflag to verify dependency consistency.
Audit Metadata