sota-rust SKILL.md skillA

sota-rust from martinholovsky/sota-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add martinholovsky/sota-skills/sota-rust@git:20261027.03dd711

Pins git:20261027.03dd711 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
martinholovsky/sota-skills
Path
skills/sota-rust/SKILL.md
Versions recorded
19
Latest version
git:20261027.03dd711, committed Oct 27, 2026
First version recorded
Jun 28, 2026
Size
15,021 bytes
Repository stars
26
License
CC-BY-4.0

State-of-the-art Rust engineering (2026) for writing and auditing Rust code. Covers idiomatic ownership and API design, error handling and panic policy, unsafe discipline with Miri, formal verification (Kani proof harnesses, Flux refinement types), async/tokio (cancellation safety, structured concurrency, graceful shutdown), security and supply chain (cargo audit/deny/vet, integer overflow, serde hardening, zeroize), performance (profiling, allocation reduction, release profiles), and…

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# SOTA Rust (2026)

## Purpose

This skill encodes the 2026 state of the art for production Rust: the idioms,
security posture, performance discipline, and CI baseline expected of an
expert Rust codebase. It assumes a recent stable Rust toolchain, edition 2024 (Rust ≥1.85; next
edition expected ~2027), and the tokio 1.x API. Verify the latest toolchain
release at blog.rust-lang.org. It serves two modes — **BUILD** (write new code to this
standard) and **AUDIT** (find where existing code falls short, with severity
and evidence). The detailed rules live in `rules/*.md`; load only the files
relevant to the task (see index below). Every rules file ends with an "Audit
checklist" of grep/clippy patterns — use those verbatim in AUDIT mode.

## BUILD mode

When writing or modifying Rust code:

1. **Scope the work, load the rules.** Pick the relevant `rules/` files from
   the index. Touching async code? Load 04. Adding a dependency, parsing
   network input? Load 05. Spawning an external program? Load 08. Writing any `unsafe`? Load 03 — no exceptions.
   Proving a parser, decoder or arithmetic function panic- and overflow-free, or touching any
   `#[kani::*]` or Flux `#[spec]`? Load 09.
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add martinholovsky/sota-skills/sota-rust@sha256:fbd8e59bedeb4a8a

The line at the top of this page pins the label git:20261027.03dd711, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_jevxhbom3fn62il5.svg)](https://markdownregistry.com/a/art_jevxhbom3fn62il5)

4 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 19 versions of this file, between Jun 28, 2026 and Oct 27, 2026, about one every 7 days.

versioncommittedcommitsizeaudit
git:20261027.03dd711 latest2026-10-27 03dd711 15,021 BA view · diff
git:20261027.0f834402026-10-27 0f83440 14,877 BA view · diff
git:20261026.808c3402026-10-26 808c340 14,647 BA view · diff
git:20261024.8dd2b0a2026-10-24 8dd2b0a 14,425 BA view · diff
git:20261024.8c3f4222026-10-24 8c3f422 14,184 BA view · diff
git:20261012.ae1b29b2026-10-12 ae1b29b 12,770 BA view · diff
git:20260926.e89beb12026-09-26 e89beb1 12,315 BA view · diff
git:20260925.0da81062026-09-25 0da8106 12,301 BA view · diff
git:20260925.9af12262026-09-25 9af1226 12,117 BA view · diff
git:20260925.51daf1f2026-09-25 51daf1f 11,979 BA view · diff
git:20260925.54c95892026-09-25 54c9589 11,736 BA view · diff
git:20260925.6e8efd92026-09-25 6e8efd9 11,568 BA view · diff
git:20260925.c4870c32026-09-25 c4870c3 11,416 BA view · diff
git:20260925.c9001692026-09-25 c900169 11,314 BA view · diff
git:20260820.7720f5a2026-08-20 7720f5a 10,635 BA view · diff
git:20260818.862b4fb2026-08-18 862b4fb 10,535 BA view · diff
git:20260710.0c498302026-07-10 0c49830 10,280 BA view · diff
git:20260701.1c5bd882026-07-01 1c5bd88 10,226 BA view · diff
git:20260628.3fd75122026-06-28 3fd7512 10,183 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (15021 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

martinholovsky/sota-skills · 26 stars · license CC-BY-4.0 · pushed 2026-11-05 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_jevxhbom3fn62il5
GET https://markdownregistry.com/api/v1/resolve?ref=martinholovsky/sota-skills/sota-rust
GET https://markdownregistry.com/api/v1/blob/fbd8e59bedeb4a8ac515769cdf0941fa36c4246ab5368675e2d76ef9aed30543

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from martinholovsky/sota-skills

AGENTS.md AGENTS.md file
martinholovsky/sota-skills · AGENTS.md
git:20261101.b77a8aa · audit A · 26 stars
CLAUDE.md CLAUDE.md file
martinholovsky/sota-skills · CLAUDE.md
git:20260703.aaa9f67 · audit B · 26 stars
sota-api-design SKILL.md skill
martinholovsky/sota-skills · skills/sota-api-design/SKILL.md · State-of-the-art API design and audit guidance (2026) covering REST/HTTP, GraphQL, gRPC, WebSockets/SSE/realtime…
git:20261024.8dd2b0a · audit A · 26 stars
sota-architecture SKILL.md skill
martinholovsky/sota-skills · skills/sota-architecture/SKILL.md · State-of-the-art software and system architecture rules (2026) for both building and auditing. Use when designing…
git:20261026.808c340 · audit A · 26 stars
sota-async-concurrency SKILL.md skill
martinholovsky/sota-skills · skills/sota-async-concurrency/SKILL.md · State-of-the-art rules for writing and auditing asynchronous and concurrent code across runtimes (Python asyncio…
git:20261026.2b6f6f7 · audit A · 26 stars
sota-c-cpp SKILL.md skill
martinholovsky/sota-skills · skills/sota-c-cpp/SKILL.md · State-of-the-art C and C++ engineering rules that Claude applies when writing or auditing C/C++. Covers modern idioms…
git:20261026.808c340 · audit A · 26 stars
sota-cli-ux SKILL.md skill
martinholovsky/sota-skills · skills/sota-cli-ux/SKILL.md · State-of-the-art CLI and developer-tool UX guidance (2026) covering command and flag design, output and interaction…
git:20261024.8dd2b0a · audit A · 26 stars
sota-cloud-infrastructure SKILL.md skill
martinholovsky/sota-skills · skills/sota-cloud-infrastructure/SKILL.md · State-of-the-art cloud infrastructure architecture (2026). Applies when designing, building, or auditing cloud…
git:20261026.2b6f6f7 · audit A · 26 stars
sota-code-security SKILL.md skill
martinholovsky/sota-skills · skills/sota-code-security/SKILL.md · Secure coding and security auditing rules. Use whenever BUILDING or modifying code that crosses a trust boundary —…
git:20261027.7641696 · audit A · 26 stars
sota-confidential-computing SKILL.md skill
martinholovsky/sota-skills · skills/sota-confidential-computing/SKILL.md · State-of-the-art confidential computing and cryptographic PETs (2026) for BUILDING and AUDITING systems that protect…
git:20261026.ca2a1f1 · audit A · 26 stars
sota-copywriting SKILL.md skill
martinholovsky/sota-skills · skills/sota-copywriting/SKILL.md · State-of-the-art marketing copywriting and content guidance (2026) covering positioning and value propositions…
git:20261024.8dd2b0a · audit A · 26 stars
sota-data-engineering SKILL.md skill
martinholovsky/sota-skills · skills/sota-data-engineering/SKILL.md · State-of-the-art data engineering rules (2026) for building and auditing data pipelines and analytics infrastructure…
git:20261028.da12e08 · audit A · 26 stars

Every file in martinholovsky/sota-skills

Browse by kind, by grade A, or by owner.