rust-web-security
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard Rust toolchain commands including
rustcandcargosubcommands (metadata,tree,test,fmt,check,clippy,audit) to evaluate the security posture and correctness of the codebase being analyzed.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze user-provided Rust source code and security specifications, which constitutes a surface for indirect prompt injection. - Ingestion points: User-supplied project files, route definitions, and security requirements in SKILL.md and associated references.
- Boundary markers: The instructions require the agent to establish trust boundaries and verify identity contexts explicitly before proceeding with modifications.
- Capability inventory: The agent can execute local build, linting, and testing tools (cargo, rustc).
- Sanitization: The skill guides the agent to implement rigorous input validation, SSRF protection through DNS resolution isolation and IP range blocking, and exhaustive negative security testing.- [EXTERNAL_DOWNLOADS]: The skill references official security standards, documentation, and advisory databases from trusted organizations and well-known services, including the IETF, OpenID Foundation, docs.rs, OWASP, and RustSec. These references provide the necessary context for performing a security audit.
Audit Metadata