Security audit
Security checks for vulnerabilities and agentic risk
The skill provides coherent Rust–Python development guidance and examples, with no supported evidence of malicious or unrelated behavior.
Use a project virtual environment and a trusted locally built sidecar executable. Treat the templates as starting points: verify builds and add input/output limits before processing large or untrusted data.
The code's only demonstrated purpose is string normalization. It contains no Python integration, cross-language boundary, profiling, or distribution behavior. Although Rust error handling and unit testing overlap with supporting aspects of the description, they do not establish the declared primary purpose. No external resource access or unrelated triggers are present.
Without declared permissions the skill's intent is opaque and cannot be validated.
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
def call_rust(exe: Path, payload: dict) -> dict:
p = subprocess.run(
[str(exe)],
input=json.dumps(payload, ensure_ascii=False),
capture_output=True,
No suspicious patterns detected.