quality-gate
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill provides instructions for running development tasks via
cargo xtask checkandpnpm build. These commands execute scripts and build processes defined within the local project repository, which is standard practice for automated development workflows. - Indirect Prompt Injection: This skill is designed to process and analyze the repository's source code for quality checks. While this involves ingesting external data (the project's files), it employs well-known development utilities (linters, formatters, and test runners) to perform these actions within the development environment.
- Automated Tool Installation: The skill mentions the auto-installation of standard Rust development tools such as
clippy,rustfmt, andwasm-pack. These are official or widely recognized tools within the software development ecosystem used for code analysis and compilation.
Audit Metadata