rust-supply-chain
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project files such as Cargo.lock and Cargo.toml, creating a potential vector for indirect prompt injection. 1. Ingestion points: Reads Cargo.lock and Cargo.toml from the target repository workspace. 2. Boundary markers: No specific delimitation instructions are provided to separate external file data from the agent's instructions. 3. Capability inventory: Instructs the agent to execute cargo audit, cargo deny check, cargo tree, and cargo update. 4. Sanitization: No content sanitization or structured validation of the input file data is defined.
- [COMMAND_EXECUTION]: Instructs the agent to perform command-line operations using the cargo ecosystem to audit dependencies and check for version duplicates.
- [EXTERNAL_DOWNLOADS]: The skill configuration in DENY.md references the official RustSec advisory database at github.com/rustsec/advisory-db, which is an established resource for Rust security data.
Audit Metadata