Install
$ agentstack add skill-gertsylvest-meta-team-miri-dsp ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README — it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming — see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps — measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Miri DSP
miri interprets Rust's mid-level IR and catches a large class of undefined behaviour that cargo test will silently miss: out-of-bounds slice access, use-after-free, reads of uninitialised memory, invalid unsafe pointer arithmetic, and aliasing violations under the Stacked Borrows / Tree Borrows models.
Miri is most valuable on no_std DSP crates — they tend to contain hand-written unsafe for SIMD and ringbuffers where the compiler cannot prove safety. The cost is runtime speed (Miri is an interpreter, not a compiler), so this skill targets the unit tests of a single crate rather than a whole workspace.
Limitations
- Miri does not target
wasm32. It runs on the host triple. UB-free under Miri does not guarantee UB-free under wasm32 — but in practice the UB classes Miri catches are target-independent. - Floating-point intrinsics are slow under Miri. Heavy DSP benchmark suites will time out. Focus tests on correctness invariants and
unsafeboundaries, not on full audio renders. cargo benchdoes not run under Miri — use thecargo-bench-rtskill on native instead.
Requirements
- Rust nightly toolchain with the miri component:
``bash rustup toolchain install nightly rustup +nightly component add miri ``
The script bootstraps both if missing.
Instructions
The argument is in $ARGUMENTS. Pass it directly to the run script:
bash "$(dirname "$0")/run.sh" $ARGUMENTS
The argument is the path to the crate directory.
Output sections
| Section | What it reports | |---|---| | TOOLCHAIN | Whether nightly + miri are installed | | MIRI | Result of cargo +nightly miri test |
Typical usage
# Run miri on a single DSP crate
bash run.sh ./rust/audio-dsp
# Run on every DSP crate in a workspace
for crate in rust/dsp-*; do bash run.sh "$crate"; done
What to look for
MIRIfailing with "Undefined Behavior" — read the report carefully. Miri pinpoints the exact statement and explains the violation (e.g. "reading uninitialised bytes", "out-of-bounds pointer offset", "stacked borrows violation").MIRItiming out — narrow the test set. Mark long-running renders with#[cfg(not(miri))]so they are skipped under Miri while still running undercargo test.MIRIreporting "unsupported operation" — Miri does not support every libc or syscall. If the offending call is in a third-party dep, gate that path behind a feature flag the DSP crate does not enable; if it is in your own code, the operation probably should not be in a DSP crate at all.
How often to run
Run on every change to an unsafe block in a DSP crate. Optional but valuable in CI on a nightly schedule.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: gertsylvest
- Source: gertsylvest/meta-team
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.