rust-web-services — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited rust-web-services (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Build Rust HTTP services with explicit state, typed boundaries, observable behavior, and production-grade runtime contracts.
axum plus tower layers for new HTTP services unless the repo already standardizes on another framework.references/axum-tower-architecture.md for router structure, state, extractors, middleware, errors, and versioned APIs.references/runtime-config-data.md for Tokio runtime concerns, config, database access, background jobs, and graceful shutdown.references/testing-observability.md for integration tests, tracing, metrics, contract tests, and production readiness.tokio with only required features unless the repo uses full feature sets consistently.serde DTOs at HTTP boundaries and domain types internally.thiserror for domain errors and typed response mapping at the HTTP edge.tracing/tracing-subscriber with structured spans and request IDs.sqlx for database-backed services when compile-time query checking and async pooling are useful.For service changes:
cargo fmt --all --check
cargo test --all-targets
cargo clippy --all-targets --all-features -- -D warningsAdd integration tests for new routes, error status mapping, auth/authorization branches, config parsing, database behavior, and graceful shutdown or background work when touched.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.