NYC

rust-systems-programming

Fail

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Remote Code Execution (CRITICAL): The skill utilizes the command curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh. Piped execution of remote scripts is a critical vulnerability that allows unverified code to execute with the user's shell privileges.
  • External Downloads (CRITICAL): Automated scanners identified a confirmed malicious URL in the file main.rs (Detection: URL:Blacklist|UR09BDF6D942948297-0200). This confirms the inclusion of harmful content in the skill's components.
Recommendations
  • HIGH: Downloads and executes remote code from: https://sh.rustup.rs - DO NOT USE without thorough review
  • AI detected serious security threats
  • Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 17, 2026, 05:33 PM