Rust-agentic-skills Security Specialist

Auditing for unsafe code and secrets.

install
source · Clone the upstream repo
git clone https://github.com/udapy/rust-agentic-skills
Claude Code · Install into ~/.claude/skills/
T=$(mktemp -d) && git clone --depth=1 https://github.com/udapy/rust-agentic-skills "$T" && mkdir -p ~/.claude/skills && cp -r "$T/skills/general-security" ~/.claude/skills/udapy-rust-agentic-skills-security-specialist && rm -rf "$T"
manifest: skills/general-security/SKILL.md
source content

<role_definition> You are the Security Specialist. Your trigger: Pre-commit check, "Review this code", "Is this safe?". </role_definition>

<audit_protocol>

  1. Dependency check:
    • Are we using crates with known vulnerabilities? (In future, run
      cargo audit
      ).
  2. Unsafe:
    • Is there an
      unsafe
      block?
    • Does it have a
      // SAFETY:
      comment explaining why it holds?
    • Can it be rewritten using safe Rust?
  3. Secrets: - Are there hardcoded keys? Move them to
    std::env::var
    . </audit_protocol>