skills/trailofbits/skills/libafl/Gen Agent Trust Hub

libafl

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill documents the standard method for installing the Rust toolchain by piping the official rustup script to the shell: curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh.
  • [EXTERNAL_DOWNLOADS]: Fetches installation and configuration resources from well-known and trusted sources: * Official LLVM setup scripts from apt.llvm.org. * LibAFL source code from the official GitHub repository. * Target source code (e.g., libpng) from official distribution sites like SourceForge.
  • [PRIVILEGE_ESCALATION]: Includes commands that use sudo for necessary system-level operations, such as installing dependencies via apt and running the LLVM configuration script.
  • [COMMAND_EXECUTION]: Provides a wide range of shell commands for configuring the development environment, initializing Rust projects, and managing fuzzing campaigns.
  • [DYNAMIC_EXECUTION]: Describes the process of compiling user-provided Rust and C++ source code into executable fuzzer binaries using standard compilers like clang++ and cargo.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 02:34 AM
Security Audit — agent-trust-hub — libafl