技能 cargo-cdk

📦

cargo-cdk

Name: cargo-cdk
Author: getcargohq

v2.0.0 内容修订 r1 安全 ⚙️ 外部命令🌐 网络访问📁 文件系统访问

Migrate cargo-cdk References to cargo-project

Existing cargo-cdk installations can retain an outdated skill name after a rename. This migration pointer identifies cargo-project as the replacement and documents the CLI naming change.

支持: Claude Codex Code(CC)

🥈 80 白银

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "cargo-cdk" from https://skillstore.io/skills/getcargohq-cargo-cdk.md and its manifest at https://skillstore.io/api/skills/getcargohq-cargo-cdk/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/getcargohq-cargo-cdk.md 已签名 manifest GET /api/skills/getcargohq-cargo-cdk/manifest 已签名 lockfile GET /api/skills/getcargohq-cargo-cdk/lockfile

测试它

正在使用“cargo-cdk”。 Which skill should replace cargo-cdk?

预期结果:

Use cargo-project. The cargo-cdk entry is a migration pointer and contains no operational instructions.

正在使用“cargo-cdk”。 Summarize the CLI naming change and compatibility claim.

预期结果:

The pointer documents a rename from cargo-ai cdk to cargo-ai project.
It states that cdk remains an alias.
It does not verify behavior in your installed CLI version.

正在使用“cargo-cdk”。 What should our team verify before relying on the replacement?

预期结果:

Confirm the cargo-project skill is available from the expected source.
Review its instructions before using its operational features.
Check the installed CLI version for command and alias support.

安全审计

安全

v1 • 2026/10/12 打开版本化报告

All three static alerts are false positives: Markdown backticks, a repository homepage, and a relative link to the renamed skill. No evidence found of command execution, data exfiltration, or prompt injection in the supplied files. The referenced cargo-project skill was not supplied and is outside this assessment.

已扫描文件

分析行数

复核项

已忽略误报

风险因素

⚙️ 外部命令 (1)

SKILL.md:14

🌐 网络访问 (1)

SKILL.md:6

📁 文件系统访问 (1)

SKILL.md:14

最新一次完成的静态与语义审计未检测到已确认的安全发现。这并不能证明该 Skill 没有副作用。

审计者: codex

分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告

复制报告链接

https://skillstore.io/skills/getcargohq-cargo-cdk/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/getcargohq-cargo-cdk/security.svg)](https://skillstore.io/skills/getcargohq-cargo-cdk?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/getcargohq-cargo-cdk?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/getcargohq-cargo-cdk/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/getcargohq-cargo-cdk.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学术引用 (APA · BibTeX · CFF)

APA 引用

getcargohq. (2026). cargo-cdk security audit report (audit version 1) [Author version 2.0.0]. Skillstore. https://skillstore.io/skills/getcargohq-cargo-cdk/audits/1

BibTeX 引用

@techreport{getcargohq-getcargohq-cargo-cdk-2026,
  author = {getcargohq},
  title = {cargo-cdk security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/getcargohq-cargo-cdk/audits/1},
  note = {Author version 2.0.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "cargo-cdk security audit report (audit version 1)"
version: "2.0.0"
type: report
authors:
  - name: "getcargohq"
date-released: "2026-10-12"
url: "https://skillstore.io/skills/getcargohq-cargo-cdk/audits/1"
identifiers:
  - type: other
    value: "skillstore:getcargohq-cargo-cdk:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据证据置信度: 中

架构

100

可维护性

内容

社区

规范符合性

你能构建什么

Resolve a legacy skill installation

Identify the replacement entrypoint when an existing installation still loads cargo-cdk.

Update internal documentation

Explain the skill rename and command naming change when revising team reference material.

Review migration compatibility

Distinguish the documented legacy alias from the preferred command name before planning CLI configuration updates.

试试这些提示

Find the replacement skill

Which skill replaces cargo-cdk? Answer using this migration pointer only.

Explain the command rename

Summarize the documented CLI command rename and legacy alias. Do not execute commands.

Draft a migration notice

Draft a short team notice about the cargo-cdk rename, replacement skill, retained CLI alias, and planned redirect removal.

Assess migration boundaries

Create a migration review checklist from this pointer. Separate documented facts from checks requiring the successor skill or installed CLI.

最佳实践

Use cargo-project for current instructions after confirming the replacement is available.
Verify the documented alias against your installed CLI version.
Update maintained references before the legacy pointer is removed.