rust-crate-publishing-readiness

Pass

Audited by Gen Agent Trust Hub on Jun 29, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill provides documentation and checklists for standard Rust development practices. No malicious code, obfuscation, or exfiltration patterns were detected.
  • [COMMAND_EXECUTION]: The skill defines a set of shell commands for the agent or user to run via the cargo toolchain.
  • Evidence includes commands: cargo fmt --check, cargo test, cargo package --list, and cargo publish --dry-run found in references/publishing-patterns.md.
  • These commands are used for code formatting, unit testing, and simulation of the publishing process, which are legitimate operations for Rust library development.
  • [DATA_EXPOSURE]: The workflow incorporates security best practices by explicitly instructing the agent to check for and exclude secrets from the final package.
  • Evidence: Confirm local artifacts, large generated files, and secrets are excluded. in workflows/prepare-crate-release.md.
  • Evidence: Inspect packaged contents for missing files and accidental secrets. in SKILL.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 29, 2026, 03:33 PM
Security Audit — agent-trust-hub — rust-crate-publishing-readiness