技能 cargo-cdk
📦

cargo-cdk

v2.0.0 內容修訂 r1 安全 ⚙️ 外部命令🌐 網路存取📁 檔案系統存取

Migrate cargo-cdk References to cargo-project

Existing cargo-cdk installations can retain an outdated skill name after a rename. This migration pointer identifies cargo-project as the replacement and documents the CLI naming change.

支援: Claude Codex Code(CC)
Maintain this Skill? Claim it 🥈 80 銀級

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求
Review the Skillstore skill "cargo-cdk" from https://skillstore.io/skills/getcargohq-cargo-cdk.md and its manifest at https://skillstore.io/api/skills/getcargohq-cargo-cdk/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/getcargohq-cargo-cdk.md 已簽名 manifest GET /api/skills/getcargohq-cargo-cdk/manifest 已簽名 lockfile GET /api/skills/getcargohq-cargo-cdk/lockfile

測試它

正在使用「cargo-cdk」。 Which skill should replace cargo-cdk?

預期結果:

Use cargo-project. The cargo-cdk entry is a migration pointer and contains no operational instructions.

正在使用「cargo-cdk」。 Summarize the CLI naming change and compatibility claim.

預期結果:

  • The pointer documents a rename from cargo-ai cdk to cargo-ai project.
  • It states that cdk remains an alias.
  • It does not verify behavior in your installed CLI version.

正在使用「cargo-cdk」。 What should our team verify before relying on the replacement?

預期結果:

  • Confirm the cargo-project skill is available from the expected source.
  • Review its instructions before using its operational features.
  • Check the installed CLI version for command and alias support.

安全審計

安全
v1 • 2026/10/12 開啟版本化報告

All three static alerts are false positives: Markdown backticks, a repository homepage, and a relative link to the renamed skill. No evidence found of command execution, data exfiltration, or prompt injection in the supplied files. The referenced cargo-project skill was not supplied and is outside this assessment.

2
已掃描檔案
31
分析行數
0
複核項目
0
已忽略的誤報

風險因素

⚙️ 外部命令 (1)
SKILL.md:14
🌐 網路存取 (1)
SKILL.md:6
📁 檔案系統存取 (1)
SKILL.md:14
最近一次完成的靜態與語意稽核未偵測到已確認的安全發現。這並不能證明該 Skill 沒有副作用。
審計單位: codex
分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告
安全評估

複製報告連結

https://skillstore.io/skills/getcargohq-cargo-cdk/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/getcargohq-cargo-cdk/security.svg)](https://skillstore.io/skills/getcargohq-cargo-cdk?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/getcargohq-cargo-cdk?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/getcargohq-cargo-cdk/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/getcargohq-cargo-cdk.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
學術引用 (APA · BibTeX · CFF)

APA 引用

getcargohq. (2026). cargo-cdk security audit report (audit version 1) [Author version 2.0.0]. Skillstore. https://skillstore.io/skills/getcargohq-cargo-cdk/audits/1

BibTeX 引用

@techreport{getcargohq-getcargohq-cargo-cdk-2026, author = {getcargohq}, title = {cargo-cdk security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/getcargohq-cargo-cdk/audits/1}, note = {Author version 2.0.0} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "cargo-cdk security audit report (audit version 1)" version: "2.0.0" type: report authors: - name: "getcargohq" date-released: "2026-10-12" url: "https://skillstore.io/skills/getcargohq-cargo-cdk/audits/1" identifiers: - type: other value: "skillstore:getcargohq-cargo-cdk:audit:1" description: "Skillstore immutable audit report identifier"

Skillstore 評分

評分依據 證據置信度: 中
55
架構
100
可維護性
87
內容
65
社群
91
規範符合度

你可以打造什麼

Resolve a legacy skill installation

Identify the replacement entrypoint when an existing installation still loads cargo-cdk.

Update internal documentation

Explain the skill rename and command naming change when revising team reference material.

Review migration compatibility

Distinguish the documented legacy alias from the preferred command name before planning CLI configuration updates.

試試這些提示

Find the replacement skill 
Which skill replaces cargo-cdk? Answer using this migration pointer only.
Explain the command rename 
Summarize the documented CLI command rename and legacy alias. Do not execute commands.
Draft a migration notice 
Draft a short team notice about the cargo-cdk rename, replacement skill, retained CLI alias, and planned redirect removal.
Assess migration boundaries 
Create a migration review checklist from this pointer. Separate documented facts from checks requiring the successor skill or installed CLI.

最佳實務

  • Use cargo-project for current instructions after confirming the replacement is available.
  • Verify the documented alias against your installed CLI version.
  • Update maintained references before the legacy pointer is removed.

避免

  • Treating this redirect as a complete project management skill.
  • Assuming the successor inherits this audit without a separate review.
  • Relying indefinitely on the legacy pointer despite its planned removal.

常見問題

What does cargo-cdk provide now?
It provides a migration pointer to cargo-project and documents the CLI naming change.
Does this entry contain project instructions?
No. The file explicitly states that this directory holds no instructions.
Does the old CLI command still work?
The pointer states that cdk remains an alias. Confirm support in your installed CLI version.
What dependency is declared?
The compatibility metadata declares @cargo-ai/cli from npm as a requirement.
Was cargo-project included in this security review?
No. Its files were not supplied, so this assessment does not establish the safety or capabilities of the successor.
When will the redirect be removed?
The pointer says it will be removed in a later release, but it does not provide a date or release number.

開發者詳細資訊

作者

getcargohq

授權

MIT

作者版本

v2.0.0

Skillstore 修訂

r1

儲存庫

https://github.com/getcargohq/cargo-skills/tree/92c825ad4ba1bbbbeff96ae85e62187279f3854d/cargo-cdk

引用

ac65f11adc012e45fc55cbe33b40ce7263896afd

維護新鮮度

2026/10/12

使用量

0 次下載 · 0 次瀏覽

檔案結構

📄 skill-metadata.json

📄 SKILL.md