rust-impl-testing

Warn

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONMETADATA_POISONING
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and install the cargo-nextest tool by piping a curl download from an external URL (https://get.nexte.st/latest/linux or https://get.nexte.st/latest/mac) directly into tar for extraction into the user's binary directory.
  • [EXTERNAL_DOWNLOADS]: Fetches and installs external binaries and tools from the nexte.st domain.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and execute user-provided Rust source code through tools like cargo test and cargo nextest run.
  • Ingestion points: Processes unit tests, integration tests, and doc tests written by users in .rs files and markdown comments.
  • Boundary markers: The instructions do not specify any boundary markers or delimiters to separate code content from potential embedded instructions.
  • Capability inventory: The skill uses high-privilege capabilities including shell command execution (cargo), file system manipulation, and network operations (curl).
  • Sanitization: There is no mention of validating or sanitizing the user-provided code before it is passed to the compiler and test runner.
  • [METADATA_POISONING]: The SKILL.md frontmatter identifies the author as OpenAEC-Foundation, which does not match the provided vendor context of impertio-studio.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 9, 2026, 05:46 AM