arch-supply-chain
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation references audit files and security advisories from trusted sources including the Bytecode Alliance and Mozilla. These downloads are part of the standard decentralized trust model used by the Rust community.
- [COMMAND_EXECUTION]: The skill provides instructions for using official Rust ecosystem tools like
cargo-vet,cargo-audit, andcargo-deny. These commands are used for local auditing and policy enforcement by developers and do not involve unauthorized execution. - [SAFE]: No malicious patterns, prompt injections, or obfuscation techniques were detected. The skill's primary purpose is to educate users on reducing their project's attack surface and improving supply-chain security.
Audit Metadata