salvo-routing
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The content is restricted to legitimate technical documentation and Rust code examples for the Salvo web framework. No evidence of prompt injection, data exfiltration, or unauthorized command execution was found.
- [INDIRECT_PROMPT_INJECTION]: The skill documents how to handle external data through URL path parameters and HTTP headers, which is an inherent feature of web routers. The documentation encourages security best practices by demonstrating the use of typed parameters (e.g., {id:num}) and regular expression constraints (e.g., {id|\d+}) to validate and sanitize incoming data.
- Ingestion points: URL path segments and request headers described in SKILL.md.
- Boundary markers: Path parameters are explicitly delimited by curly braces.
- Capability inventory: Code snippets show request parameter access and HTTP response redirection.
- Sanitization: The skill provides examples of input validation using the Rust type system and regular expression filters.
Audit Metadata