code-quality

Pass

Audited by Gen Agent Trust Hub on Apr 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install development tools like cargo-machete, cargo-shear, and cargo-unused-features from the official crates.io registry.
  • [COMMAND_EXECUTION]: The skill executes local scripts such as ./scripts/code-quality.sh and ./scripts/quality-gates.sh, along with system commands like find, rg, and wc for code analysis and reporting.
  • [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it analyzes local source code. 1. Ingestion points: Reads Rust source files (*.rs) using find and rg (SKILL.md). 2. Boundary markers: No delimiters or instructions are used to separate code content from agent instructions. 3. Capability inventory: Executes local scripts, cargo commands, and system utilities (SKILL.md). 4. Sanitization: Source code content is not sanitized or filtered before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 18, 2026, 05:38 PM