embedded-rust

Fail

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill facilitates the download and execution of code from remote sources without prior verification.
  • In SKILL.md, a setup script is fetched from https://github.com/probe-rs/probe-rs/releases/latest/download/probe-rs-tools-installer.sh and piped to sh for execution.
  • In references/embedded-rust-targets.md, the espup binary is downloaded from https://github.com/esp-rs/espup/releases/latest/download/espup-x86_64-unknown-linux-gnu.
  • [COMMAND_EXECUTION]: The skill uses potentially dangerous commands to execute external files.
  • In references/embedded-rust-targets.md, the downloaded binary is made executable using chmod +x and then executed locally via ./espup-x86_64-unknown-linux-gnu install.
Recommendations
  • HIGH: Downloads and executes remote code from: https://github.com/probe-rs/probe-rs/releases/latest/download/probe-rs-tools-installer.sh - DO NOT USE without thorough review
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 15, 2026, 01:50 AM