rust-quality

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill serves as a best-practice guide for Rust development, adhering to industry-standard idiomatic patterns. All external links point to official documentation or well-known community resources (e.g., rust-lang.github.io, tokio.rs).
  • [COMMAND_EXECUTION]: The instructions require the agent to execute standard Rust toolchain commands, including cargo build, cargo clippy, cargo test, cargo fmt, and cargo miri test. These are the primary tools used to fulfill the skill's purpose and do not represent atypical command execution risks.
  • [PROMPT_INJECTION]: The skill constitutes an indirect prompt injection surface as it is designed to analyze and process Rust source files (.rs) and manifests (Cargo.toml) that could contain untrusted instructions.
  • Ingestion points: Reads and reviews .rs source code and Cargo.toml files within the workspace as defined in the skill scope (SKILL.md).
  • Boundary markers: Absent; no specific delimiters are established to differentiate analyzed code from agent instructions.
  • Capability inventory: The skill utilizes shell commands (cargo) to compile and execute code (via build scripts and tests) within the project (SKILL.md).
  • Sanitization: None; the skill relies on the standard security properties of the Rust toolchain and the local environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 01:22 AM
Security Audit — agent-trust-hub — rust-quality