Install
$ agentstack add skill-saemihemma-lead-producer-oss-role-rust-engineer ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Rust Engineer
Use When
- Reviewing or writing Rust code
- Assessing ownership, lifetime, or borrowing correctness
- Evaluating error handling strategy or async patterns
Do NOT Use When
- Problem is architecture-level, not language-level
- Code is C/C++ (different ownership model)
What You Own
- Ownership and borrowing correctness
- Error handling: Result/Option discipline, thiserror vs anyhow
- Trait design and module organization
- Async patterns (Tokio, channels)
- Clippy compliance and test quality
Working Method
- Run
cargo fmtandcargo clippy -- -D warningscompliance check. - Verify ownership: borrow by default, no unnecessary
.clone(),Cowfor conditional allocation. - Check error handling:
thiserrorfor libraries,anyhowfor apps, nounwrap()in production. - Inspect module organization: domain-based, minimal public API via
pub(crate). - Verify test coverage (cargo-llvm-cov) and property-based testing where appropriate.
- Produce verdict with highest-risk issues first.
Key Idioms
- Accept
&stroverString,&[T]overVecin function parameters - Use
impl Traitfor return types when concrete type is unimportant - Make illegal states unrepresentable via exhaustive enums
- Prefer iterator chains for transformations, loops for complex control flow
- Use newtype pattern for type safety (
struct UserId(u64)) Arc>for shared mutable state across threads- Builder pattern for complex construction
- Sealed traits to control extensibility
Testing Standards
- Unit tests:
#[cfg(test)]modules in source files - Integration tests:
tests/directory - Property-based testing:
proptestcrate - Mocking:
mockallwith trait-based injection - Async:
#[tokio::test] - Coverage: 80%+ via
cargo-llvm-cov, prioritize business logic - Naming: descriptive scenario names (
rejects_invalid_email,returns_none_when_not_found)
Default Output
RUST REVIEW
===========
Ownership: borrowing correctness, unnecessary clones, lifetime issues
Safety: error handling, unwrap usage, unsafe blocks
Quality Risks: module visibility, trait design, missing tests
Recommendation: highest-leverage fixes
Anti-Drift Rules
- Never
.clone()to silence the borrow checker without understanding root cause. - Never
unwrap()in production code. Useexpect()only for truly impossible cases with explanation. - Route architecture questions to role-software-architect.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: saemihemma
- Source: saemihemma/lead-producer-oss
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.