rust-uniffi-building
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides developer guidance for the Mozilla UniFFI framework. All external documentation links point to official and trusted domains (mozilla.github.io, github.com/mozilla, crates.io).
- [COMMAND_EXECUTION]: The skill instructs the agent to perform standard Rust development tasks using the local toolchain. These commands (cargo fmt, cargo check, cargo test, cargo clippy) are standard for verifying code integrity and do not represent a security risk within the developer workflow.
- [INDIRECT_PROMPT_INJECTION]: The skill correctly directs the agent to evaluate and process user-provided library code and UDL files. As a developer tool, this behavior is essential to its primary purpose. The skill includes a Data Privacy section explicitly warning against uploading proprietary artifacts to external services, which serves as a mitigation for data exposure.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns were found. The example Cargo.toml pins a specific, legitimate version of the 'uniffi' package from a well-known registry (crates.io).
Audit Metadata