moai-lang-rust

Fail

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: CRITICALPROMPT_INJECTIONSAFE
Full Analysis
  • [Indirect Prompt Injection] (LOW): THe skill functions by analyzing Rust source code and project configuration, which serves as an entry point for untrusted data. \n
  • Ingestion points: Processes workspace files such as .rs files and Cargo.toml. \n
  • Boundary markers: There are no explicit instructions to wrap untrusted code in delimiters or to ignore potential instructions embedded in comments. \n
  • Capability inventory: THe agent is granted file system read access (Read, Grep, Glob) and tools for external documentation lookup. \n
  • Sanitization: THe skill does not include logic for sanitizing or filtering instructions that might be present in the ingested code files. \n- [External Downloads] (SAFE): THe skill recommends standard Rust ecosystem libraries (Axum, Tokio, SQLx) and standard tool usage (cargo sqlx prepare). These are industry-standard practices and do not involve unverified or risky download behaviors.
Recommendations
  • Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 17, 2026, 05:41 PM