audit-rust
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a strictly read-only workflow for analyzing repository evidence, explicitly prohibiting unauthorized file modifications, commits, or staging operations during audits.
- [SAFE]: The instructions establish a clear hierarchy of authority, prioritizing user requests and repository-specific guidance over external references or skill defaults.
- [SAFE]: Comprehensive security-focused profiles are included for auditing 'unsafe' code, FFI boundaries, and local-agent runtimes, emphasizing invariant validation and protection against untrusted inputs.
- [SAFE]: The skill utilizes standard and reputable Rust development tools (e.g., Cargo, Clippy, Miri, RustSec) and references official or well-known community documentation (e.g., Rust API Guidelines, Tokio, Tauri).
- [SAFE]: Explicit warnings are provided regarding indirect prompt injection risks, instructing the agent to treat IPC arguments and external payloads as untrusted and requiring validation at trust boundaries.
- [SAFE]: No evidence of obfuscation, hardcoded credentials, persistence mechanisms, or unauthorized network operations to non-whitelisted domains was found.
Audit Metadata