rust-impl-ffi-bindgen

Warn

Audited by Socket on Sep 9, 2026

1 alert found:

Anomaly
AnomalyLOW
references/examples.md

No malicious behavior or supply-chain attack indicators are present. The code is instructional and readable, with no exfiltration, persistence, shell execution, obfuscated payload, or suspicious network activity. However, Example 5 is unsafe because shrink_to_fit does not guarantee capacity equals length before reconstructing the Vec; this should be redesigned to preserve and pass the actual capacity. Example 3 also requires explicit callback lifetime and deregistration guarantees to avoid use-after-free. These are significant security and correctness concerns despite the absence of malware.

Confidence: 98%Severity: 62%
Audit Metadata
Analyzed At
Sep 9, 2026, 05:47 AM
Package URL
pkg:socket/skills-sh/impertio-studio%2Frust-claude-skill-package%2Frust-impl-ffi-bindgen%2F@f014d06da4277622111e5e990a02c0120588ef034b84d86a31f682fcb0eaa724