rust-semver

Pass

Audited by Gen Agent Trust Hub on Jul 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: Provides instructions for using Cargo-based release and maintenance tools, such as cargo publish, cargo yank, and cargo workspaces. The instructions explicitly state that publishing is a public action and require the agent to seek user confirmation before proceeding.
  • [EXTERNAL_DOWNLOADS]: Recommends the installation of standard Rust development utilities (e.g., cargo-semver-checks, cargo-audit, cargo-deny) from the official crates.io registry. The commands include the --locked flag to ensure the integrity and reproducibility of the installed binaries.
  • [SAFE]: Integrates security auditing into the release workflow by documenting how to use cargo-audit and cargo-deny to scan projects for known vulnerabilities listed in the RustSec advisory database.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 21, 2026, 06:56 PM
Security Audit — agent-trust-hub — rust-semver