rust-state-machines
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external Rust source code and configuration files, which presents a surface for indirect prompt injection where untrusted data could influence agent behavior.
- Ingestion points: The agent is instructed to read and analyze files matching the
**/*.rsand**/Cargo.tomlglob patterns. - Boundary markers: The skill lacks explicit instructions or delimiters to isolate the content of analyzed files from the agent's core instructions.
- Capability inventory: The skill allows the agent to perform logical audits, transition design reviews, and provide verification strategies based on ingested code.
- Sanitization: No sanitization or validation steps are defined for the content of the analyzed files.
Audit Metadata