bevy-ecs-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill defines several optimization commands that utilize
cargoandgrepfor code analysis, testing, and linting within a Rust project environment. - [INDIRECT_PROMPT_INJECTION]: The skill has an inherent vulnerability surface for indirect prompt injection due to its interaction with external project data.
- Ingestion points: The skill reads
.rssource files from thesrc/directory usingGrepandReadtools. - Boundary markers: No explicit boundary markers or instructions to ignore embedded prompts in source code are provided.
- Capability inventory: The skill is configured with access to
Bash(specifically forcargocommands), as well asWrite,Edit, andWebFetchtools. - Sanitization: There is no evidence of sanitization or validation of the ingested source code content before it is processed by the agent.
Audit Metadata