rust-testing
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions include running
cargo test,cargo bench, andcargo llvm-cov. These commands involve compiling and executing code from the project environment, which is standard for Rust development.\n- [EXTERNAL_DOWNLOADS]: The skill recommends using thecriterioncrate and installing thecargo-llvm-covtool from the official Rust package registry (crates.io). These are well-known resources in the Rust ecosystem.\n- [PROMPT_INJECTION]: Indirect Prompt Injection Surface:\n - Ingestion points: The skill reads and processes user-provided Rust source files and configuration (
Cargo.toml,src/lib.rs).\n - Boundary markers: The prompt instructions do not include specific delimiters or warnings to ignore potential instructions embedded in processed code.\n
- Capability inventory: The skill allows the execution of shell commands via the cargo toolchain as described in
SKILL.md.\n - Sanitization: No validation or sanitization is performed on the code before it is passed to the execution environment for testing.
Audit Metadata