Rust Dependency and Parser Security

Request	Route
Advisories, `deny.toml`, dependency vetting, registry and source policy	This skill.
Untrusted file, archive, backup, or binary-format parsing	This skill.
Publishing, Trusted Publishing, binary provenance, SBOMs	The `rust-crate-release` skill.
Unsafe-code soundness, Miri, sanitizers	The `rust-unsafe` or `rust-sanitizers-miri` skill; at minimum run `cargo +nightly miri test --locked`.
TLS transport policy	The `rust-networking` skill; never disable certificate checks with `danger_accept_invalid_certs`.
Authentication, secret storage, cryptographic protocol design, key lifecycle	Not this skill; follow the domain security review.

Other skills named in this file apply when they are installed.

Review gate

Block a change that does any of these: