The Agent Skills Directory

[SAFE]: The skill establishes a high-security posture for Rust projects by mandating the use of rustls for TLS and aws-lc-rs as the crypto provider, effectively precluding less secure or complex C-FFI alternatives like OpenSSL.
[SAFE]: It enforces memory safety by requiring #![forbid(unsafe_code)] at the crate root of all managed projects, ensuring that any necessary exceptions are strictly documented and reviewed with explicit safety justifications.
[SAFE]: The skill includes advanced data protection measures, such as instructions to suppress process core dumps at multiple layers (in-process via rlimit, systemd, container, and kernel) to prevent the accidental leakage of sensitive credentials or PII stored in the process heap.
[SAFE]: It promotes secure secret handling through the standardized use of the secrecy and zeroize crates, ensuring that sensitive values are redacted in debug output and securely sanitized from memory after use.
[SAFE]: The instructions integrate essential supply-chain security checks using industry-standard tools like cargo-deny, cargo-audit, and cargo-shear to monitor for vulnerable dependencies, unauthorized licenses, and unused crate baggage.

pma-rust