The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The CI workflow template uses taiki-e/install-action and dtolnay/rust-toolchain. These are standard, well-regarded GitHub Actions in the Rust ecosystem for installing tools like cargo-nextest, cargo-deny, and cargo-llvm-cov. These downloads are expected for the skill's primary purpose of CI/CD automation.
[COMMAND_EXECUTION]: The skill instructs the agent to perform local execution of Rust toolchain commands, including cargo fmt, cargo clippy, cargo deny, and cargo audit. These are legitimate operations for building, linting, and auditing Rust projects.
[INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest and analyze existing project files like Cargo.toml and Cargo.lock to configure workspaces and CI gates.
Ingestion points: Reads Cargo.toml, Cargo.lock, and workflow files (SKILL.md, references/workspaces-features.md).
Boundary markers: The workflow uses specialized exploration agents to inspect the codebase before taking action.
Capability inventory: Executes cargo subcommands through the shell (references/ci-gate.md, SKILL.md).
Sanitization: Relies on the security-focused design of tools like cargo-deny and cargo-audit to safely process dependency metadata.

rust-tooling-cicd