Rust Security

Purpose

Guide agents through Rust security practices: dependency auditing with cargo-audit, policy enforcement with cargo-deny, RUSTSEC advisory database, memory-safe patterns for FFI, and combining fuzzing with Miri for security review.

Triggers

• "How do I check my Rust dependencies for CVEs?"
• "How do I use cargo-audit?"
• "How do I enforce dependency policies in CI?"
• "What's the RUSTSEC advisory database?"
• "How do I write memory-safe FFI in Rust?"
• "How do I fuzz-test my Rust library for security bugs?"

Workflow

1. cargo-audit — vulnerability scanning