rust-clap
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE] (SAFE): Comprehensive analysis of the 46 files confirms the skill is an educational resource. No prompt injections, data exfiltration patterns, or obfuscation were detected.
- [COMMAND_EXECUTION] (LOW): The file
references/subcmd-external.mdincludes a code example demonstrating how to implement external subcommands usingstd::process::Command. This is an illustrative example of a standard and documented feature of theclapecosystem (allowing git-style plugins) and does not represent a malicious instruction. - [DATA_EXFILTRATION] (SAFE): While the skill mentions using environment variables (e.g.,
DATABASE_URLinreferences/arg-env-fallback.md), these are used within the context of standard configuration practices and do not involve unauthorized data access or exfiltration.
Audit Metadata