rust-essentials

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill mentions the use of standard Rust ecosystem tools such as cargo test, cargo fmt, and clippy. These are legitimate utilities used for code formatting, linting, and testing within a development workflow and do not represent a security risk when used as described.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the local crate, specifically Cargo.toml and existing Rust source files. This creates a surface for indirect prompt injection if those files were to contain malicious instructions. However, the skill is focused on enforcing strict idiomatic standards and uses the official Rust toolchain for validation, which is typical for development assistants.
  • Ingestion points: Cargo.toml and existing .rs files.
  • Boundary markers: None explicitly defined for file content.
  • Capability inventory: Standard cargo commands for testing and linting.
  • Sanitization: Relies on the Rust compiler and standard linter (Clippy) for code verification.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 09:25 PM