Compétences cargo-cdk
📩

cargo-cdk

v2.0.0 RĂ©vision du contenu r1 SĂ»r ⚙ Commandes externes🌐 AccĂšs rĂ©seau📁 AccĂšs au systĂšme de fichiers

Migrate cargo-cdk References to cargo-project

Existing cargo-cdk installations can retain an outdated skill name after a rename. This migration pointer identifies cargo-project as the replacement and documents the CLI naming change.

Prend en charge: Claude Codex Code(CC)
Maintain this Skill? Claim it đŸ„ˆ 80 Argent

Installer avec mon Agent

Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.

Demande d’agent
Review the Skillstore skill "cargo-cdk" from https://skillstore.io/skills/getcargohq-cargo-cdk.md and its manifest at https://skillstore.io/api/skills/getcargohq-cargo-cdk/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.

Ressources lisibles par les agents

Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.

Détail Markdown GET /skills/getcargohq-cargo-cdk.md manifest signé GET /api/skills/getcargohq-cargo-cdk/manifest lockfile signé GET /api/skills/getcargohq-cargo-cdk/lockfile

Tester

Utilisation de « cargo-cdk ». Which skill should replace cargo-cdk?

RĂ©sultat attendu:

Use cargo-project. The cargo-cdk entry is a migration pointer and contains no operational instructions.

Utilisation de « cargo-cdk ». Summarize the CLI naming change and compatibility claim.

RĂ©sultat attendu:

  • The pointer documents a rename from cargo-ai cdk to cargo-ai project.
  • It states that cdk remains an alias.
  • It does not verify behavior in your installed CLI version.

Utilisation de « cargo-cdk ». What should our team verify before relying on the replacement?

RĂ©sultat attendu:

  • Confirm the cargo-project skill is available from the expected source.
  • Review its instructions before using its operational features.
  • Check the installed CLI version for command and alias support.

Audit de sécurité

Sûr
v1 ‱ 12/10/2026 Ouvrir le rapport versionnĂ©

All three static alerts are false positives: Markdown backticks, a repository homepage, and a relative link to the renamed skill. No evidence found of command execution, data exfiltration, or prompt injection in the supplied files. The referenced cargo-project skill was not supplied and is outside this assessment.

2
Fichiers analysés
31
Lignes analysées
0
ÉlĂ©ments Ă  examiner
0
Faux positifs ignorés

Facteurs de risque

⚙ Commandes externes (1)
SKILL.md:14
🌐 AccĂšs rĂ©seau (1)
SKILL.md:6
📁 Accùs au systùme de fichiers (1)
SKILL.md:14
Le dernier audit statique et sĂ©mantique terminĂ© n’a dĂ©tectĂ© aucun constat de sĂ©curitĂ© confirmĂ©. Cela ne prouve pas que le skill est sans effets secondaires.
Audité par: codex
Partager et citer ce rapport

Partagez le rapport d’évaluation versionnĂ©, le badge neutre, la carte intĂ©grable et les citations. Skillstore prĂ©sente les preuves sans dĂ©cider si ce Skill est sĂ»r.

Ouvrir le rapport versionné
Évaluation de sĂ©curitĂ©

Copier le lien du rapport

https://skillstore.io/skills/getcargohq-cargo-cdk/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/getcargohq-cargo-cdk/security.svg)](https://skillstore.io/skills/getcargohq-cargo-cdk?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/getcargohq-cargo-cdk?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/getcargohq-cargo-cdk/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Carte intégrable

<iframe src="https://skillstore.io/embed/skills/getcargohq-cargo-cdk.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Citations académiques (APA · BibTeX · CFF)

Citation APA

getcargohq. (2026). cargo-cdk security audit report (audit version 1) [Author version 2.0.0]. Skillstore. https://skillstore.io/skills/getcargohq-cargo-cdk/audits/1

Citation BibTeX

@techreport{getcargohq-getcargohq-cargo-cdk-2026, author = {getcargohq}, title = {cargo-cdk security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/getcargohq-cargo-cdk/audits/1}, note = {Author version 2.0.0} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "cargo-cdk security audit report (audit version 1)" version: "2.0.0" type: report authors: - name: "getcargohq" date-released: "2026-10-12" url: "https://skillstore.io/skills/getcargohq-cargo-cdk/audits/1" identifiers: - type: other value: "skillstore:getcargohq-cargo-cdk:audit:1" description: "Skillstore immutable audit report identifier"

Score Skillstore

Pourquoi ce score Niveau de confiance des preuves: Moyen
55
Architecture
100
Maintenabilité
87
Contenu
65
Communauté
91
Conformité aux spécifications

Ce que vous pouvez créer

Resolve a legacy skill installation

Identify the replacement entrypoint when an existing installation still loads cargo-cdk.

Update internal documentation

Explain the skill rename and command naming change when revising team reference material.

Review migration compatibility

Distinguish the documented legacy alias from the preferred command name before planning CLI configuration updates.

Essayez ces prompts

Find the replacement skill 
Which skill replaces cargo-cdk? Answer using this migration pointer only.
Explain the command rename 
Summarize the documented CLI command rename and legacy alias. Do not execute commands.
Draft a migration notice 
Draft a short team notice about the cargo-cdk rename, replacement skill, retained CLI alias, and planned redirect removal.
Assess migration boundaries 
Create a migration review checklist from this pointer. Separate documented facts from checks requiring the successor skill or installed CLI.

Bonnes pratiques

  • Use cargo-project for current instructions after confirming the replacement is available.
  • Verify the documented alias against your installed CLI version.
  • Update maintained references before the legacy pointer is removed.

Éviter

  • Treating this redirect as a complete project management skill.
  • Assuming the successor inherits this audit without a separate review.
  • Relying indefinitely on the legacy pointer despite its planned removal.

Foire aux questions

What does cargo-cdk provide now?
It provides a migration pointer to cargo-project and documents the CLI naming change.
Does this entry contain project instructions?
No. The file explicitly states that this directory holds no instructions.
Does the old CLI command still work?
The pointer states that cdk remains an alias. Confirm support in your installed CLI version.
What dependency is declared?
The compatibility metadata declares @cargo-ai/cli from npm as a requirement.
Was cargo-project included in this security review?
No. Its files were not supplied, so this assessment does not establish the safety or capabilities of the successor.
When will the redirect be removed?
The pointer says it will be removed in a later release, but it does not provide a date or release number.

Détails du développeur

Auteur

getcargohq

Licence

MIT

Version de l’auteur

v2.0.0

RĂ©vision Skillstore

r1

DĂ©pĂŽt

https://github.com/getcargohq/cargo-skills/tree/92c825ad4ba1bbbbeff96ae85e62187279f3854d/cargo-cdk

RĂ©f

ac65f11adc012e45fc55cbe33b40ce7263896afd

RĂ©cence de maintenance

12/10/2026

Utilisation

0 téléchargements · 0 vues

Structure de fichiers

📄 skill-metadata.json

📄 SKILL.md