setup-rust-ci
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard Rust development tools including cargo, actionlint, and the GitHub CLI (gh) to validate the generated workflows locally and monitor their status.
- [EXTERNAL_DOWNLOADS]: The generated workflows download and execute GitHub Actions from the actions, dtolnay, and Swatinem GitHub organizations to perform standard CI operations like code checkout and toolchain management.
- [DATA_EXPOSURE]: The skill reads project configuration from Cargo.toml and local documentation to parameterize CI templates, and writes the output to the standard .github/workflows/ directory with a default read-only permission policy.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project configuration data which acts as a parameter source for generating CI YAML files. Ingestion points: Cargo.toml, docs/agents/rust.md; Boundary markers: Absent; Capability inventory: Local command execution and file writing; Sanitization: Absent.
Audit Metadata