rust-wasm
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to set up the development environment using standard Rust tooling, such as
cargo install wasm-packandrustup target add. These are standard procedures for the described task. - [EXTERNAL_DOWNLOADS]: The skill references official Rust ecosystem tools and compiler targets. Downloads are performed via
cargoandrustup, which use the official and trusted crates.io registry and Rust infrastructure. - [INDIRECT_PROMPT_INJECTION]: The provided Rust code templates include functions (
parse_config,fetch_data) that ingest external data such as JSON strings and remote URLs. While these are development templates, they represent the primary ingestion surface for untrusted data in applications built using these patterns. - Ingestion points:
SKILL.md(specifically theparse_configandfetch_dataRust functions). - Boundary markers: Absent in the code snippets themselves.
- Capability inventory: Use of
web_sysfor network fetching and DOM manipulation. - Sanitization: The templates leverage standard libraries like
serde_jsonfor structured data parsing, which is a recommended practice.
Audit Metadata