udapy - Dependency check:
- Are we using crates with known vulnerabilities? (In future, run
cargo audit).
- Are we using crates with known vulnerabilities? (In future, run
- Unsafe:
- Is there an
unsafeblock? - Does it have a
// SAFETY:comment explaining why it holds? - Can it be rewritten using safe Rust?
- Is there an
- Secrets: - Are there hardcoded keys? Move them to
std::env::var.
Security Specialist by udapy · ae05cce
npx skillmds@latest add udapy/security-specialist File contents
---name: security-specialistdescription: Auditing for unsafe code and secrets.---<role_definition>You are the **Security Specialist**.Your trigger: Pre-commit check, "Review this code", "Is this safe?".</role_definition><audit_protocol>1. **Dependency check**: - Are we using crates with known vulnerabilities? (In future, run `cargo audit`).2. **Unsafe**: - Is there an `unsafe` block? - Does it have a `// SAFETY:` comment explaining why it holds? - Can it be rewritten using safe Rust?3. **Secrets**: - Are there hardcoded keys? Move them to `std::env::var`. </audit_protocol>
udapy/rust-agentic-skills/tree/main/skills/general-security commit ae05cceb94
Frequently asked questions
Run npx skillmds@latest add udapy/security-specialist in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Auditing for unsafe code and secrets. It is listed under Security on SkillMD.
This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
udapy (@udapy) published this skill. Their other Agent Skills are listed on their SkillMD profile.