rust-node-bootstrap

Pass

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute standard shell commands for project setup, dependency management, and verification, including pnpm install, cargo check, and project-specific version synchronization scripts.
  • [EXTERNAL_DOWNLOADS]: Facilitates the installation of additional development helper skills from the vendor's official GitHub repository (onsager-ai/dev-skills) and the project's primary homepage (codervisor/forge). These downloads are consistent with the skill's stated purpose of providing a complete development environment.
  • [DATA_EXPOSURE]: No sensitive file access or hardcoded credentials were detected. The skill correctly instructs users to manage secrets like NPM_TOKEN via repository settings rather than local files.
  • [PROMPT_INJECTION]: The instructional content focuses on project structure and command execution without attempting to override system safety guidelines or agent behavior protocols.
  • [NO_CODE]: The skill package itself contains only markdown documentation and text-based configuration templates; it does not ship with pre-compiled binaries or opaque executable scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 12, 2026, 10:41 PM
Security Audit — agent-trust-hub — rust-node-bootstrap