rust-impl-testing
Warn
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONMETADATA_POISONING
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and install the
cargo-nextesttool by piping acurldownload from an external URL (https://get.nexte.st/latest/linuxorhttps://get.nexte.st/latest/mac) directly intotarfor extraction into the user's binary directory. - [EXTERNAL_DOWNLOADS]: Fetches and installs external binaries and tools from the
nexte.stdomain. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and execute user-provided Rust source code through tools like
cargo testandcargo nextest run. - Ingestion points: Processes unit tests, integration tests, and doc tests written by users in
.rsfiles and markdown comments. - Boundary markers: The instructions do not specify any boundary markers or delimiters to separate code content from potential embedded instructions.
- Capability inventory: The skill uses high-privilege capabilities including shell command execution (
cargo), file system manipulation, and network operations (curl). - Sanitization: There is no mention of validating or sanitizing the user-provided code before it is passed to the compiler and test runner.
- [METADATA_POISONING]: The
SKILL.mdfrontmatter identifies the author asOpenAEC-Foundation, which does not match the provided vendor context ofimpertio-studio.
Audit Metadata