optimize-rust-code
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill workflow involves executing system commands such as
cargo build,rustc,samply, andhyperfineto profile, compile, and benchmark Rust applications. - [EXTERNAL_DOWNLOADS]: The skill fetches external dependencies from the standard Rust registry (crates.io). It references well-known crates like
rayonandrustc-hashin its examples and benchmarks. - [DYNAMIC_EXECUTION]: As a code optimization tool, the skill fundamentally involves compiling and executing Rust source code to measure performance metrics and verify that optimizations do not change observable behavior.
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes untrusted user-provided Rust source code and log data for optimization. The skill mitigates accidental misbehavior by requiring the creation of an equivalence oracle to verify outputs.
- [PRIVILEGE_ESCALATION]: The documentation mentions that certain external measurement tools, such as
dtrussandcargo flamegraph, may require elevated privileges (sudo) on specific operating systems like macOS to access kernel-level profiling data.
Audit Metadata