rust-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were found. The skill serves as an educational reference for Rust development, using standard tools (cargo, rustc, clippy) for their intended purposes. It references well-known industry guidelines from a recognized technology provider.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted user-provided Rust code. Ingestion points: User-provided source files (SKILL.md). Boundary markers: Absent. Capability inventory: Shell access for cargo, rustc, clippy; file system read/write/edit. Sanitization: Absent. This creates a surface where malicious code provided by a user could potentially execute during tool runs (e.g., build.rs). This is a known risk for development-oriented skills.
Audit Metadata