cargo-lock-manager

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION] (SAFE): The skill uses standard Rust cargo and git commands to manage dependencies. These actions are transparent and aligned with the skill's description.
  • [DATA_EXFILTRATION] (SAFE): No evidence of sensitive data access or exfiltration to external domains was found.
  • [EXTERNAL_DOWNLOADS] (SAFE): While cargo update connects to crates.io, this is a trusted registry and standard behavior for the tool.
  • [Indirect Prompt Injection] (LOW):
  • Ingestion points: The scripts read path arguments and process Cargo.toml files.
  • Boundary markers: None explicitly defined in script outputs.
  • Capability inventory: cargo operations and git commands.
  • Sanitization: Basic shell quoting is applied to file paths.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 11:27 PM