code-review-rust
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external Rust source code and configuration files, creating a vulnerability surface where malicious instructions embedded in the code could influence agent behavior.
- Ingestion points: Ingests .rs files and Cargo.toml.
- Boundary markers: Lacks explicit delimiters or instructions to ignore embedded instructions in the ingested files.
- Capability inventory: Instructs the agent to execute several CLI tools (cargo-audit, clippy, semgrep, miri) and grep searches (rg).
- Sanitization: Does not specify any sanitization or validation for the content of the analyzed source code.
Audit Metadata