bevy-ecs

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides technical guidance for using the Bevy ECS core. The instructions focus on app architecture, data modeling with components and resources, and system scheduling.
  • [INDIRECT_PROMPT_INJECTION]: The skill includes instructions for the agent to read Cargo.toml and Cargo.lock files to determine project versions. While this creates a surface for indirect prompt injection from project configuration files, the capability inventory (generating Rust code and advising on cargo run) is consistent with the skill's primary purpose and does not involve high-privilege operations or data exfiltration.
  • Ingestion points: Cargo.toml, Cargo.lock (referenced in SKILL.md core workflow).
  • Boundary markers: None identified.
  • Capability inventory: Code generation and project execution via cargo run (referenced in SKILL.md core workflow).
  • Sanitization: None identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 10:33 PM