The Agent Skills Directory

[SAFE]: The skill consists entirely of markdown documentation and guidance for developers and architects. It does not contain executable scripts or binary files.
[EXTERNAL_DOWNLOADS]: The documentation references the installation of standard Rust ecosystem tools including cargo-deny, cargo-audit, cargo-nextest, cargo-release, release-plz, cargo-llvm-cov, and mdbook. These are well-known, community-standard tools used for development and security auditing, and their inclusion is considered safe practice.
[INDIRECT_PROMPT_INJECTION]: The skill describes a workspace-reviewer agent that analyzes project configuration files such as Cargo.toml, deny.toml, and clippy.toml. This creates an ingestion surface for untrusted project data; however, the analysis is described as static and aimed at identifying configuration drift and anti-patterns, which is a standard and low-risk operation for an AI agent in a developer environment.
[COMMAND_EXECUTION]: The skill provides various command-line snippets (e.g., cargo clippy, cargo nextest, cargo deny) for the user to execute manually or include in CI/CD pipelines. These are standard operations for Rust project maintenance and pose no inherent security risk as they are not executed automatically by the skill itself.

using-rust-workspaces