rust-cli-clap — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited rust-cli-clap (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Build Rust command-line tools that are predictable, scriptable, pleasant in terminals, and easy to ship.
Cargo.toml, src/bin, clap definitions, integration tests, snapshots, release scripts, and README examples.clap derive for ordinary CLIs. Use the builder API when commands are generated dynamically, hidden/unstable command surfaces need custom construction, or macros make the shape harder to read.--json/machine output where automation is expected, and stable exit codes.Open only the section needed for the task:
references/clap-parser-playbook.md for clap derive/builder design, argument groups, validators, completions, and migration notes.references/terminal-contracts.md for stdout/stderr, color, progress, config precedence, error messages, and shell automation rules.references/testing-packaging.md for assert_cmd, trycmd, snapshots, binaries, completions, manpages, cargo-dist, and release checks.clap = { features = ["derive", "env"] } when environment variables are part of the contract; otherwise avoid unused features.camino or Utf8PathBuf only when UTF-8 paths are an explicit invariant. Otherwise keep PathBuf.anstream/anstyle or clap styling for color-aware output; respect NO_COLOR, CLICOLOR, and non-TTY behavior.tracing for diagnostics when the CLI has subcommands, network calls, daemon/client modes, or hidden debugging flags.thiserror for domain errors and miette or color-eyre at the presentation boundary only when rich reports add value.For CLI changes, prefer the smallest ladder that proves the contract:
cargo fmt --all --check
cargo test --all-targets
cargo clippy --workspace --all-targets --all-features -- -D warningsAdd focused command tests for new flags, output modes, exit codes, config precedence, and examples shown in docs. Snapshot CLI output only after normalizing volatile paths, timestamps, colors, and ordering.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.