tailrocks-rust-project-setup
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches crate version metadata from the official crates.io API and uses mise to install specific pinned versions of Rust subcommands and toolchains.
- [COMMAND_EXECUTION]: The skill executes shell commands using Bun to run a custom resolution script and mise to manage project dependencies and tools. These executions are legitimate scaffolding activities.
- [INDIRECT_PROMPT_INJECTION]: The skill processes information from crates.io. The potential for injection is mitigated by strict regex validation of input names and instructions that require the agent to treat the registry data as evidence for manual verification. Ingestion points: scripts/resolve-crate-versions.ts fetches data from crates.io. Boundary markers: Instructions advise verifying registry data against documentation. Capability inventory: The skill is capable of file writing and tool execution for project setup. Sanitization: Crate names are strictly validated to prevent injection into the API URL.
Audit Metadata