rust-dev
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a bundled Python script (
python3 scripts/check_crate_version.py <crate-name>) using a user-supplied crate name as an argument. - Evidence: This occurs in the
SKILL.mdfile under the 'Dependency Management' section. - Context: While this is a functional requirement for managing dependencies, it creates a potential command injection surface if the agent does not properly sanitize the input before executing the shell command.
Audit Metadata