rust-crate-publishing-readiness
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill provides documentation and checklists for standard Rust development practices. No malicious code, obfuscation, or exfiltration patterns were detected.
- [COMMAND_EXECUTION]: The skill defines a set of shell commands for the agent or user to run via the cargo toolchain.
- Evidence includes commands:
cargo fmt --check,cargo test,cargo package --list, andcargo publish --dry-runfound inreferences/publishing-patterns.md. - These commands are used for code formatting, unit testing, and simulation of the publishing process, which are legitimate operations for Rust library development.
- [DATA_EXPOSURE]: The workflow incorporates security best practices by explicitly instructing the agent to check for and exclude secrets from the final package.
- Evidence:
Confirm local artifacts, large generated files, and secrets are excluded.inworkflows/prepare-crate-release.md. - Evidence:
Inspect packaged contents for missing files and accidental secrets.inSKILL.md.
Audit Metadata