rust-quality
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a best-practice guide for Rust development, adhering to industry-standard idiomatic patterns. All external links point to official documentation or well-known community resources (e.g., rust-lang.github.io, tokio.rs).
- [COMMAND_EXECUTION]: The instructions require the agent to execute standard Rust toolchain commands, including
cargo build,cargo clippy,cargo test,cargo fmt, andcargo miri test. These are the primary tools used to fulfill the skill's purpose and do not represent atypical command execution risks. - [PROMPT_INJECTION]: The skill constitutes an indirect prompt injection surface as it is designed to analyze and process Rust source files (
.rs) and manifests (Cargo.toml) that could contain untrusted instructions. - Ingestion points: Reads and reviews
.rssource code andCargo.tomlfiles within the workspace as defined in the skill scope (SKILL.md). - Boundary markers: Absent; no specific delimiters are established to differentiate analyzed code from agent instructions.
- Capability inventory: The skill utilizes shell commands (
cargo) to compile and execute code (via build scripts and tests) within the project (SKILL.md). - Sanitization: None; the skill relies on the standard security properties of the Rust toolchain and the local environment.
Audit Metadata