axum-idioms
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing untrusted external inputs through HTTP request extractors.
- Ingestion points: Untrusted data is ingested via Path, Query, and Json extractors in handlers defined in SKILL.md.
- Boundary markers: Boundary enforcement is demonstrated through the use of type-safe extractors and the custom ValidatedJson wrapper.
- Capability inventory: The defined patterns enable handlers to interact with AppState, involving database operations and generic service delegation.
- Sanitization: Input sanitization is recommended via the implementation of the validator crate and a custom validation extractor.
Audit Metadata