workers-multi-lang
Warn
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS] (MEDIUM): The build scripts
scripts/build-rust.shandscripts/build-wasm.shperform automated installations of external tools. - Evidence in
scripts/build-rust.sh:cargo install wasm-packandcargo install worker-buildare executed if the tools are missing. - Evidence in
scripts/build-wasm.sh:cargo install wasm-packandnpm install --save-dev assemblyscript @assemblyscript/loaderare executed to satisfy build requirements. - [COMMAND_EXECUTION] (MEDIUM): The skill utilizes several subprocess calls to compile and optimize code.
- Evidence in
scripts/build-wasm.sh: Execution ofemcc(Emscripten),npx asc(AssemblyScript compiler), andwasm-opt(Binaryen) for runtime compilation. - [DATA_EXPOSURE] (SAFE): Analysis of the scripts and documentation shows no attempts to access sensitive file paths (e.g., SSH keys, AWS credentials) or exfiltrate data to external domains.
- [PROMPT_INJECTION] (SAFE): No patterns of prompt injection, instruction overrides, or safety filter bypasses were detected in the markdown or script comments.
Audit Metadata