rust-types-and-apis
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill identifies and processes Rust source files ('.rs') and manifests ('Cargo.toml'). This functionality introduces a potential attack surface where malicious instructions could be embedded within the comments or strings of the analyzed code to influence agent behavior.
- Ingestion points: File patterns '/Cargo.toml' and '/*.rs'.
- Boundary markers: No explicit markers are defined to isolate input code from the agent's core instructions.
- Capability inventory: Logic analysis and code synthesis based on the provided Rust design patterns.
- Sanitization: No input sanitization or filtering logic is present for the processed files.- [SAFE]: The documentation references and links to reputable open-source tools for Rust API versioning, specifically 'cargo-semver-checks' and 'cargo-public-api' on GitHub.
Audit Metadata