rust-quality-gates
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill generates a local shell script (
check.sh) and optionally a Rust-based orchestrator (xtask) to run quality checks. It also requires making the shell script executable viachmod +x. - [EXTERNAL_DOWNLOADS]: The skill recommends installing several well-known developer tools via standard package managers (Cargo, Homebrew, Pipx). These include
prek,cargo-machete,cargo-deny, andcargo-nextest. These downloads originate from established public repositories on GitHub and official package registries. - [INDIRECT_PROMPT_INJECTION]: The skill assesses the codebase by reading project configuration files (e.g.,
Cargo.toml) and source code to determine the appropriate gate configuration. While this is an ingestion surface for untrusted data, it is a core requirement for the skill's functionality. - Ingestion points: Reads
Cargo.toml,Cargo.lock,rust-toolchain.toml, and project source layout (Step 1, SKILL.md). - Boundary markers: Not present for the initial assessment phase.
- Capability inventory: Can execute
cargocommands, install tools, and modify project configuration files (SKILL.md). - Sanitization: No specific sanitization or filtering is mentioned for the content of the project files being read.
Audit Metadata