skills/trancee/skills/miri/Gen Agent Trust Hub

miri

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/smoke.py helper utility uses the subprocess.run function to execute cargo miri commands for validating the local installation. The script implements robust input validation using regular expressions for the --toolchain and --target arguments to prevent command injection. It also explicitly clears sensitive environment variables like MIRIFLAGS and RUSTFLAGS before execution to ensure a clean state.
  • [EXTERNAL_DOWNLOADS]: The instructions guide the user to install components through rustup and cargo, which are the standard, official package managers for the Rust ecosystem. All external references point to reputable academic and official sources, such as the rust-lang GitHub organization and ETH Zurich's research domains.
  • [DYNAMIC_EXECUTION]: The skill includes a Python-based smoke test that dynamically generates a temporary Rust package (miri-skill-smoke) to verify toolchain functionality. This process is isolated within a temporary directory and uses the --locked flag to ensure dependency integrity.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 05:01 PM