salvo-csrf
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents a dependency on the 'salvo' library (version 0.94.0) with the 'csrf' feature, which is a standard Rust crate from the official registry.
- [COMMAND_EXECUTION]: The provided code examples include functionality to start a web server by binding to a local port using
TcpListener, which is standard behavior for building web applications with this framework. - [CREDENTIALS_UNSAFE]: The skill uses static placeholder keys (e.g.,
*b"0123...") in code examples to demonstrate HMAC and AES-GCM cipher configuration. These are clearly marked as placeholders for development and do not represent leaked production secrets.
Audit Metadata