professional-rust-review
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines a legitimate and structured workflow for static analysis and architectural review. No obfuscation, hardcoded credentials, or unauthorized network activity was found in the instructions or reference materials.\n- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection because it is designed to ingest and analyze local Rust source files. Ingestion points: Rust files discovered via the
fdcommand are read and processed by delegated worker models. Boundary markers: Absent; the provided worker templates do not use specific delimiters (like XML tags) to isolate the code being analyzed from the instructions. Capability inventory: The skill utilizesfdandwcfor file discovery andteamsfor model delegation, but lacks file-write or network-outbound capabilities. Sanitization: No filtering or sanitization of the source code content is performed. This is a standard functional risk for code auditing tools and is classified as low risk.
Audit Metadata