miri
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/smoke.pyhelper utility uses thesubprocess.runfunction to executecargo miricommands for validating the local installation. The script implements robust input validation using regular expressions for the--toolchainand--targetarguments to prevent command injection. It also explicitly clears sensitive environment variables likeMIRIFLAGSandRUSTFLAGSbefore execution to ensure a clean state. - [EXTERNAL_DOWNLOADS]: The instructions guide the user to install components through
rustupandcargo, which are the standard, official package managers for the Rust ecosystem. All external references point to reputable academic and official sources, such as therust-langGitHub organization and ETH Zurich's research domains. - [DYNAMIC_EXECUTION]: The skill includes a Python-based smoke test that dynamically generates a temporary Rust package (
miri-skill-smoke) to verify toolchain functionality. This process is isolated within a temporary directory and uses the--lockedflag to ensure dependency integrity.
Audit Metadata