Source profileQuality 91/100Review permissions

gaelic-ghost/socket/plugins/rust-skills/skills/ci-workflow/SKILL.md

ci-workflow

Design, inspect, and align Rust CI workflows with local Cargo validation, including cargo fmt, cargo clippy, cargo test, cargo build, cargo doc, cargo package, workspace package selection, feature matrices, MSRV checks, rustup toolchain setup, Clippy warnings-as-errors policy, caches, artifacts, and GitHub Actions-style automation.

Source repository stars
6
Declared platforms
0
Static risk flags
1
Last source update
2026-08-21
Source checked
2026-08-25

Decision brief

What it does: where it fits

Design, inspect, and align Rust CI workflows with local Cargo validation, including cargo fmt, cargo clippy, cargo test, cargo build, cargo doc, cargo package, workspace package selection, feature matrices, MSRV checks, rustup toolchain setup, Clippy warnings-as-errors policy, caches, artifacts, and GitHub Actions-style automation.

Best for

  • Align Rust CI with the validation that actually protects the project.
  • The practical goal is to make CI prove the same behavior maintainers care about locally: formatting, linting, build, tests, docs, package readiness, MSRV, and feature or workspace matrices where those are real compatibi…

Not for

  • Tasks that require unconfirmed production actions or broad system permissions.
  • Environments where the pinned source and install steps cannot be inspected.

Compatibility matrix

Platform support, with evidence labels

PlatformStatusEvidenceWhat to check
CodexNot declaredNo explicit evidencePortability before use
Claude CodeNot declaredNo explicit evidencePortability before use
CursorNot declaredNo explicit evidencePortability before use
Gemini CLINot declaredNo explicit evidencePortability before use
Open the compatibility checker

Installation

Inspect first. Install second.

The source command is displayed only when detected. A safe inspection prompt is always available so your agent can explain every action before execution.

Source-detected install commandSource
npx skills add https://github.com/gaelic-ghost/socket --skill "plugins/rust-skills/skills/ci-workflow"
Safe inspection promptEditorial

Inspect the Agent Skill "ci-workflow" from https://github.com/gaelic-ghost/socket/blob/1140bc0b60f2c938b81d67dcee88a5eeb2e2f39d/plugins/rust-skills/skills/ci-workflow/SKILL.md at commit 1140bc0b60f2c938b81d67dcee88a5eeb2e2f39d. List every install step, command, network request, credential, file read/write, external action, and rollback step. Explain whether it fits my task. Do not install or execute anything until I approve.

Workflow

What the source asks the agent to do

  1. 01

    Toolchain Setup

    Prefer the repo's existing setup. If adding setup from scratch, install the channel and components the commands require:

    Prefer the repo's existing setup. If adding setup from scratch, install the channel and components the commands require:Use rust-toolchain.toml when local and CI contributors should share the same channel/components. Do not pin nightly unless the project truly depends on nightly behavior.
  2. 02

    Purpose

    Align Rust CI with the validation that actually protects the project.

    Align Rust CI with the validation that actually protects the project.The practical goal is to make CI prove the same behavior maintainers care about locally: formatting, linting, build, tests, docs, package readiness, MSRV, and feature or workspace matrices where those are real compatibi…
  3. 03

    Source Check

    Use repo-local files, checked-out dependency sources, Dash MCP or Dash HTTP for installed docsets, and then official project documentation when Dash/local coverage is missing or stale:

    Cargo continuous integration guideCargo workspacesCargo features reference
  4. 04

    Repository Inspection

    .github/workflows/

    .github/workflows/Cargo.tomlworkspace root Cargo.toml
  5. 05

    CI Shape Decisions

    Pick jobs by the behavior they protect:

    format: cargo fmt --checklint: cargo clippy --all-targets --all-features -- -D warningstest: cargo test --all-targets --all-features

Permission review

Static risk signals and limitations

Runs scripts

medium · line 66

The documentation asks the agent to run terminal commands or scripts.

cargo test -p package-name

Runs scripts

medium · line 67

The documentation asks the agent to run terminal commands or scripts.

cargo test --workspace

Evidence record

Why each signal appears

EvidenceSourceComputedTestedEditorial
SignalValueEvidence typeMeaning
Quality score91/100ComputedDocumentation, specificity, maintenance, and trust rules
Repository stars6SourceRepository attention, not individual Skill quality
Compatibility0 platformsSourceDeclared in the catalog source record
Usage guideautomated source guideEditorialGenerated or reviewed according to the visible evidence level

Pinned source

Provenance and original SKILL.md

Repository
gaelic-ghost/socket
Skill path
plugins/rust-skills/skills/ci-workflow/SKILL.md
Commit
1140bc0b60f2c938b81d67dcee88a5eeb2e2f39d
License
Apache-2.0
Collected
2026-08-25
Default branch
main
View the original SKILL.md

Rust CI Workflow

Purpose

Align Rust CI with the validation that actually protects the project.

The practical goal is to make CI prove the same behavior maintainers care about locally: formatting, linting, build, tests, docs, package readiness, MSRV, and feature or workspace matrices where those are real compatibility surfaces.

Source Check

Use repo-local files, checked-out dependency sources, Dash MCP or Dash HTTP for installed docsets, and then official project documentation when Dash/local coverage is missing or stale:

Translate CI advice into the exact workflow jobs, commands, package selection, feature selection, and failure policy that match the repository.

Repository Inspection

Inspect:

  • .github/workflows/
  • Cargo.toml
  • workspace root Cargo.toml
  • Cargo.lock
  • rust-toolchain.toml or rust-toolchain
  • rustfmt.toml or .rustfmt.toml
  • clippy.toml
  • README, CONTRIBUTING, AGENTS, or release docs
  • Makefile, justfile, xtask, or repo scripts

CI Shape Decisions

Pick jobs by the behavior they protect:

  • format: cargo fmt --check
  • lint: cargo clippy --all-targets --all-features -- -D warnings
  • test: cargo test --all-targets --all-features
  • build: cargo build when compile coverage is needed separately
  • docs: cargo doc --no-deps when public docs matter
  • package: cargo package --dry-run for publishable crates
  • MSRV: run selected checks on the declared minimum supported Rust version

Do not add every job by default. Choose the smallest CI matrix that protects the repo's real support promise.

Toolchain Setup

Prefer the repo's existing setup. If adding setup from scratch, install the channel and components the commands require:

rustup toolchain install stable --profile minimal --component rustfmt --component clippy

Use rust-toolchain.toml when local and CI contributors should share the same channel/components. Do not pin nightly unless the project truly depends on nightly behavior.

Workspace And Feature Matrices

Use package selection intentionally:

cargo test -p package-name
cargo test --workspace

Use feature matrices only when features are part of the public compatibility surface:

cargo test -p package-name --no-default-features
cargo test -p package-name --all-features

If the project has many feature combinations, use a documented helper such as cargo hack only when the repo already uses it or the added dependency is justified.

Warnings-As-Errors Policy

Clippy's CI guidance recommends -Dwarnings, but apply that deliberately.

Good default for maintained crates:

cargo clippy --all-targets --all-features -- -D warnings

Avoid turning all compiler warnings into hard failures unless the repo wants that stricter contract. If CI is newly adopting warnings-as-errors, call out the maintenance cost.

Cache And Artifact Boundaries

Use caches to speed CI, not to define correctness. CI should still pass from a cold cache.

Only upload artifacts when users or maintainers need them, such as release binaries, generated docs, coverage, or package tarballs.

Output Shape

Return:

  1. CI intent: what the workflow is meant to protect.
  2. Local parity: local commands and matching CI commands.
  3. Toolchain: channel, components, rustup or rust-toolchain behavior, and MSRV checks.
  4. Matrix: workspace packages, features, targets, OSes, and whether each is necessary.
  5. Changes: workflow files or scripts changed.
  6. Validation: commands run locally and any CI checks that still need remote confirmation.

Guardrails

  • Do not add broad CI matrices without naming the compatibility promise they protect.
  • Do not make nightly a required lane unless the repo depends on nightly.
  • Do not hide local validation behind CI-only scripts.
  • Do not add warnings-as-errors casually to unstable or noisy repos.
  • Do not treat cache hits as proof that CI is correct.

Frequently asked questions

What to verify before installation and use

What does the ci-workflow source document cover?

Design, inspect, and align Rust CI workflows with local Cargo validation, including cargo fmt, cargo clippy, cargo test, cargo build, cargo doc, cargo package, workspace package selection, feature matrices, MSRV checks, rustup toolchain setup, Clippy warnings-as-errors policy, caches, artifacts, and GitHub Actions-style automation.

How do I install ci-workflow?

The source record exposes this install command: npx skills add https://github.com/gaelic-ghost/socket --skill "plugins/rust-skills/skills/ci-workflow". Inspect the command and pinned source before running it.

Which permission-related actions were detected?

Static rules flagged exec-script in the source; the page lists the matching lines and excerpts.

Alternatives

Compare before choosing