embedded-rust
Fail
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill facilitates the download and execution of code from remote sources without prior verification.
- In
SKILL.md, a setup script is fetched fromhttps://github.com/probe-rs/probe-rs/releases/latest/download/probe-rs-tools-installer.shand piped toshfor execution. - In
references/embedded-rust-targets.md, theespupbinary is downloaded fromhttps://github.com/esp-rs/espup/releases/latest/download/espup-x86_64-unknown-linux-gnu. - [COMMAND_EXECUTION]: The skill uses potentially dangerous commands to execute external files.
- In
references/embedded-rust-targets.md, the downloaded binary is made executable usingchmod +xand then executed locally via./espup-x86_64-unknown-linux-gnu install.
Recommendations
- HIGH: Downloads and executes remote code from: https://github.com/probe-rs/probe-rs/releases/latest/download/probe-rs-tools-installer.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata