core-dynamic-skills
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill automatically processes external content from a public documentation repository to create instruction sets for the agent, creating an ingestion path for untrusted data.
- Ingestion points: Fetches content from
https://docs.rs/{crate}/latest/{crate}/viaagent-browserorWebFetchbased on dependencies extracted from the localCargo.tomlfile. - Boundary markers: No boundary markers or defensive prompt constraints are specified when formatting or embedding the external documentation text into local files.
- Capability inventory: The skill creates directories and writes files under
~/.claude/skills/, and uses local commands likecat,grep,mkdir, andrm. - Sanitization: Lacks filtering or validation of the fetched text before using it to generate
SKILL.mdfiles or reference documents. - [COMMAND_EXECUTION]: Executes standard local shell utilities including
cat,grep,mkdir, andrmto parse dependency files, build directory trees, and maintain the local cache layout.
Audit Metadata