rust-wasm

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for the agent to set up the development environment using standard Rust tooling, such as cargo install wasm-pack and rustup target add. These are standard procedures for the described task.
  • [EXTERNAL_DOWNLOADS]: The skill references official Rust ecosystem tools and compiler targets. Downloads are performed via cargo and rustup, which use the official and trusted crates.io registry and Rust infrastructure.
  • [INDIRECT_PROMPT_INJECTION]: The provided Rust code templates include functions (parse_config, fetch_data) that ingest external data such as JSON strings and remote URLs. While these are development templates, they represent the primary ingestion surface for untrusted data in applications built using these patterns.
  • Ingestion points: SKILL.md (specifically the parse_config and fetch_data Rust functions).
  • Boundary markers: Absent in the code snippets themselves.
  • Capability inventory: Use of web_sys for network fetching and DOM manipulation.
  • Sanitization: The templates leverage standard libraries like serde_json for structured data parsing, which is a recommended practice.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 10:59 AM
Security Audit — agent-trust-hub — rust-wasm