Source profileQuality 91/100Review permissions

gaelic-ghost/socket/plugins/rust-skills/skills/ci-workflow/SKILL.md

ci-workflow

Design, inspect, and align Rust CI workflows with local Cargo validation, including cargo fmt, cargo clippy, cargo test, cargo build, cargo doc, cargo package, workspace package selection, feature matrices, MSRV checks, rustup toolchain setup, Clippy warnings-as-errors policy, caches, artifacts, and GitHub Actions-style automation.

Source repository stars
6
Declared platforms
0
Static risk flags
1
Last source update
2026-08-26
Source checked
2026-08-28

Decision brief

What it does: where it fits

Design, inspect, and align Rust CI workflows with local Cargo validation, including cargo fmt, cargo clippy, cargo test, cargo build, cargo doc, cargo package, workspace package selection, feature matrices, MSRV checks, rustup toolchain setup, Clippy warnings-as-errors policy, caches, artifacts, and GitHub Actions-style automation.

Best for

  • Align Rust CI with the validation that actually protects the project.
  • The practical goal is to make CI prove the same behavior maintainers care about locally: formatting, linting, build, tests, docs, package readiness, MSRV, and feature or workspace matrices where those are real compatibi…

Not for

  • Tasks that require unconfirmed production actions or broad system permissions.
  • Environments where the pinned source and install steps cannot be inspected.

Compatibility matrix

Platform support, with evidence labels

PlatformStatusEvidenceWhat to check
CodexNot declaredNo explicit evidencePortability before use
Claude CodeNot declaredNo explicit evidencePortability before use
CursorNot declaredNo explicit evidencePortability before use
Gemini CLINot declaredNo explicit evidencePortability before use
Open the compatibility checker

Installation

Inspect first. Install second.

The source command is displayed only when detected. A safe inspection prompt is always available so your agent can explain every action before execution.

Source-detected install commandSource
npx skills add https://github.com/gaelic-ghost/socket --skill "plugins/rust-skills/skills/ci-workflow"
Safe inspection promptEditorial

Inspect the Agent Skill "ci-workflow" from https://github.com/gaelic-ghost/socket/blob/ccbde05d2d542ce20d1645b425c75dc531b53721/plugins/rust-skills/skills/ci-workflow/SKILL.md at commit ccbde05d2d542ce20d1645b425c75dc531b53721. List every install step, command, network request, credential, file read/write, external action, and rollback step. Explain whether it fits my task. Do not install or execute anything until I approve.

Workflow

What the source asks the agent to do

  1. 01

    Toolchain Setup

    Prefer the repo's existing setup. If adding setup from scratch, install the channel and components the commands require:

    Prefer the repo's existing setup. If adding setup from scratch, install the channel and components the commands require:Use rust-toolchain.toml when local and CI contributors should share the same channel/components. Do not pin nightly unless the project truly depends on nightly behavior.
  2. 02

    Purpose

    Align Rust CI with the validation that actually protects the project.

    Align Rust CI with the validation that actually protects the project.The practical goal is to make CI prove the same behavior maintainers care about locally: formatting, linting, build, tests, docs, package readiness, MSRV, and feature or workspace matrices where those are real compatibi…
  3. 03

    Source Check

    Use repo-local files, checked-out dependency sources, Dash MCP or Dash HTTP for installed docsets, and then official project documentation when Dash/local coverage is missing or stale:

    Cargo continuous integration guideCargo workspacesCargo features reference
  4. 04

    Repository Inspection

    .github/workflows/

    .github/workflows/Cargo.tomlworkspace root Cargo.toml
  5. 05

    CI Shape Decisions

    Pick jobs by the behavior they protect:

    format: cargo fmt --checklint: cargo clippy --all-targets --all-features -- -D warningstest: cargo test --all-targets --all-features

Permission review

Static risk signals and limitations

Runs scripts

medium · line 67

The documentation asks the agent to run terminal commands or scripts.

cargo test -p package-name

Runs scripts

medium · line 68

The documentation asks the agent to run terminal commands or scripts.

cargo test --workspace

Evidence record

Why each signal appears

EvidenceSourceComputedTestedEditorial
SignalValueEvidence typeMeaning
Quality score91/100ComputedDocumentation, specificity, maintenance, and trust rules
Repository stars6SourceRepository attention, not individual Skill quality
Compatibility0 platformsSourceDeclared in the catalog source record
Usage guideautomated source guideEditorialGenerated or reviewed according to the visible evidence level

Pinned source

Provenance and original SKILL.md

Repository
gaelic-ghost/socket
Skill path
plugins/rust-skills/skills/ci-workflow/SKILL.md
Commit
ccbde05d2d542ce20d1645b425c75dc531b53721
License
Apache-2.0
Collected
2026-08-28
Default branch
main
View the original SKILL.md

Rust CI Workflow

Purpose

Align Rust CI with the validation that actually protects the project.

The practical goal is to make CI prove the same behavior maintainers care about locally: formatting, linting, build, tests, docs, package readiness, MSRV, and feature or workspace matrices where those are real compatibility surfaces.

Source Check

Use repo-local files, checked-out dependency sources, Dash MCP or Dash HTTP for installed docsets, and then official project documentation when Dash/local coverage is missing or stale:

Translate CI advice into the exact workflow jobs, commands, package selection, feature selection, and failure policy that match the repository.

Repository Inspection

Inspect:

  • .github/workflows/
  • Cargo.toml
  • workspace root Cargo.toml
  • Cargo.lock
  • rust-toolchain.toml or rust-toolchain
  • rustfmt.toml or .rustfmt.toml
  • clippy.toml
  • README, CONTRIBUTING, AGENTS, or release docs
  • Makefile, justfile, xtask, or repo scripts

CI Shape Decisions

Pick jobs by the behavior they protect:

  • format: cargo fmt --check
  • lint: cargo clippy --all-targets --all-features -- -D warnings
  • test: cargo test --all-targets --all-features
  • build: cargo build when compile coverage is needed separately
  • docs: cargo doc --no-deps when public docs matter
  • package: cargo package --dry-run for publishable crates
  • MSRV: run selected checks on the declared minimum supported Rust version

Do not add every job by default. Choose the smallest CI matrix that protects the repo's real support promise.

Toolchain Setup

Prefer the repo's existing setup. If adding setup from scratch, install the channel and components the commands require:

rustup toolchain install stable --profile minimal --component rustfmt --component clippy

Use rust-toolchain.toml when local and CI contributors should share the same channel/components. Do not pin nightly unless the project truly depends on nightly behavior.

Workspace And Feature Matrices

Use package selection intentionally:

cargo test -p package-name
cargo test --workspace

Use feature matrices only when features are part of the public compatibility surface:

cargo test -p package-name --no-default-features
cargo test -p package-name --all-features

If the project has many feature combinations, use a documented helper such as cargo hack only when the repo already uses it or the added dependency is justified.

Warnings-As-Errors Policy

Clippy's CI guidance recommends -Dwarnings, but apply that deliberately.

Good default for maintained crates:

cargo clippy --all-targets --all-features -- -D warnings

Avoid turning all compiler warnings into hard failures unless the repo wants that stricter contract. If CI is newly adopting warnings-as-errors, call out the maintenance cost.

Cache And Artifact Boundaries

Use caches to speed CI, not to define correctness. CI should still pass from a cold cache.

Only upload artifacts when users or maintainers need them, such as release binaries, generated docs, coverage, or package tarballs.

Output Shape

Return:

  1. CI intent: what the workflow is meant to protect.
  2. Local parity: local commands and matching CI commands.
  3. Toolchain: channel, components, rustup or rust-toolchain behavior, and MSRV checks.
  4. Matrix: workspace packages, features, targets, OSes, and whether each is necessary.
  5. Changes: workflow files or scripts changed.
  6. Validation: commands run locally and any CI checks that still need remote confirmation.

Guardrails

  • Do not add broad CI matrices without naming the compatibility promise they protect.
  • Do not make nightly a required lane unless the repo depends on nightly.
  • Do not hide local validation behind CI-only scripts.
  • Do not add warnings-as-errors casually to unstable or noisy repos.
  • Do not treat cache hits as proof that CI is correct.

Frequently asked questions

What to verify before installation and use

What does the ci-workflow source document cover?

Design, inspect, and align Rust CI workflows with local Cargo validation, including cargo fmt, cargo clippy, cargo test, cargo build, cargo doc, cargo package, workspace package selection, feature matrices, MSRV checks, rustup toolchain setup, Clippy warnings-as-errors policy, caches, artifacts, and GitHub Actions-style automation.

How do I install ci-workflow?

The source record exposes this install command: npx skills add https://github.com/gaelic-ghost/socket --skill "plugins/rust-skills/skills/ci-workflow". Inspect the command and pinned source before running it.

Which permission-related actions were detected?

Static rules flagged exec-script in the source; the page lists the matching lines and excerpts.

Alternatives

Compare before choosing

Computed 916

gaelic-ghost/socket

ci-workflow

Design and maintain .NET CI workflows for F#, C#, and mixed solutions with SDK setup, restore, build, test, format checks, package checks, caching, and matrix decisions.

Computed 9982

vasilyu1983/AI-Agents-public

qa-testing-ios

Guides iOS testing with XCTest, XCUITest, Swift Testing, simctl, and xcresult. Use when choosing destinations, controlling flakes, or parsing test artifacts for native apps.

Computed 975,277

dotnet/skills

writing-mstest-tests

Fix, modernize, review, or explain supplied MSTest code and MSTest-specific configuration while honoring installed versions and project style. ALWAYS USE for direct corrections: expected/actual order; generic/manual assertions; exception, hard-cast, or object[] patterns; TestContext/lifecycle; timeout/cancellation; condition/retry/cleanup; parallelization; MSTest.Sdk setup; or MSTESTxxxx. Use for "review" only when corrected code or edits are wanted. DO NOT USE for new test-case design (code-tes

Computed 97224

yonatangross/orchestkit

verify

Grade work that already exists and decide whether it can merge. Runs the project's current unit, integration, and E2E suites plus security scanning and type checking, scores every dimension 0-10, and returns a merge verdict with a VERIFIED-vs-CLAIMED evidence manifest. Writes no test files and edits no source. Use when verifying changes are ready to merge. Use /ork:cover instead when the tests still have to be written.