cargo-worktree-builds
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses the
!syntax to execute shell commands at load time for environmental awareness. These commands (find,echo,git worktree list) are used to verify the presence of a Rust project and existing configuration. There is no evidence of command injection or exfiltration within these calls. - [COMMAND_EXECUTION]: The skill instructs the agent to use standard development tools such as
cargo,just, andgit. These tools are necessary for the skill's stated purpose of managing Rust builds and worktrees. The file operations (mkdir,touch,du) are scoped to the user's cache directory and the project folder. - [DATA_EXPOSURE]: The skill suggests storing build artifacts in
$HOME/.cache/. This is a standard directory for temporary, non-sensitive data in Unix-like environments. No access to sensitive files or credentials was detected.
Audit Metadata