dioxus-knowledge-patch
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions for installing the Dioxus CLI via a remote script:
curl -fsSL https://dioxus.dev/install.sh | bash. The download originates from the framework's official domain. - [DYNAMIC_EXECUTION]: Documentation describes the use of
document::evalto execute JavaScript from Rust code for UI interoperability. This is a core feature of the framework's architecture. - [COMMAND_EXECUTION]: The skill recommends various shell commands for project management, including
dx serve,dx build, and server deployment settings likeIP=0.0.0.0. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to inspect project files such as
Cargo.toml,Cargo.lock, andDioxus.tomlto determine the correct API versions and platform settings. - Ingestion points: Reads local configuration and source files (referenced in
SKILL.md). - Boundary markers: None present.
- Capability inventory: Includes file modification, CLI command execution, and dynamic JavaScript evaluation.
- Sanitization: No explicit sanitization of project file content is mentioned.
Audit Metadata