What tools does the Rust Dependency Audit skill use?

It leverages five industry-standard tools: cargo-audit for vulnerabilities, cargo-deny for licenses, cargo-vet for supply chain trust, cargo-outdated for freshness, and cargo-geiger for unsafe code detection.

Can I use this skill for license compliance?

Yes, the skill uses cargo-deny to check dependencies against allowed license lists and can help you configure a deny.toml file to enforce organizational policies.

How does it verify supply chain security?

It integrates cargo-vet, which tracks crate audits performed by trusted organizations like Mozilla or Google, ensuring you only use verified code in your production builds.

Does it check for outdated dependencies?

Absolutely. It uses cargo-outdated to identify which crates are behind their latest versions and can suggest breaking update paths to keep your project current.

Does it work with private registries?

Yes, you can configure the underlying tools like cargo-deny to recognize and audit crates hosted on private cargo registries.

Rust Dependency Audit

Name: Rust Dependency Audit
Author: terrylica

byterrylica

•

安全与测试

Audits Rust dependencies for security vulnerabilities, license compliance, supply chain integrity, and version freshness.

This skill provides a comprehensive workflow for securing and maintaining Rust project dependencies by integrating industry-standard tools like cargo-audit, cargo-deny, cargo-vet, and cargo-outdated. It helps developers identify known vulnerabilities (CVEs), ensure license compliance, verify the supply chain through community audits, and keep crates up-to-date with real-time web verification from crates.io. Whether you are preparing for a production release or setting up a CI/CD pipeline, this skill ensures your Rust ecosystem remains secure and compliant.

主要功能

01Supply chain integrity verification with cargo-vet

02Unsafe code quantification using cargo-geiger

03License compliance and advisory enforcement using cargo-deny

0427 GitHub stars

05Vulnerability scanning with cargo-audit and RUSTSEC database

06Dependency freshness and breaking change detection via cargo-outdated

使用场景

01Pre-release security audits and compliance verification

02Automated CI/CD dependency monitoring and vulnerability scanning

03Evaluating supply chain risks and unsafe code usage in third-party crates

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add terrylica/cc-skills rust-dependency-audit

For use in Claude.ai and ChatGPT

主要功能

01Supply chain integrity verification with cargo-vet

02Unsafe code quantification using cargo-geiger

03License compliance and advisory enforcement using cargo-deny

0427 GitHub stars

05Vulnerability scanning with cargo-audit and RUSTSEC database

06Dependency freshness and breaking change detection via cargo-outdated

使用场景

01Pre-release security audits and compliance verification

02Automated CI/CD dependency monitoring and vulnerability scanning

03Evaluating supply chain risks and unsafe code usage in third-party crates

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add terrylica/cc-skills rust-dependency-audit

For use in Claude.ai and ChatGPT