rust-test
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process a wide variety of project files, including source code (
src/), manifests (Cargo.toml), and test artifacts (fixtures/,snapshots/,fuzz/). This creates an attack surface for indirect prompt injection where malicious instructions embedded in these files could influence the agent's behavior. The skill lacks explicit sanitization or boundary marker requirements for this data. - [COMMAND_EXECUTION]: The skill frequently recommends the execution of shell commands using the
cargotoolchain (e.g.,cargo test,cargo bench,cargo fuzz) as well as other task runners likejustandmake. These capabilities are central to the skill's purpose but represent a potential execution vector for malicious instructions received through indirect prompt injection.
Audit Metadata