code-quality
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install development tools like
cargo-machete,cargo-shear, andcargo-unused-featuresfrom the official crates.io registry. - [COMMAND_EXECUTION]: The skill executes local scripts such as
./scripts/code-quality.shand./scripts/quality-gates.sh, along with system commands likefind,rg, andwcfor code analysis and reporting. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it analyzes local source code. 1. Ingestion points: Reads Rust source files (
*.rs) usingfindandrg(SKILL.md). 2. Boundary markers: No delimiters or instructions are used to separate code content from agent instructions. 3. Capability inventory: Executes local scripts,cargocommands, and system utilities (SKILL.md). 4. Sanitization: Source code content is not sanitized or filtered before processing.
Audit Metadata