Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add bobmatnyc/claude-mpm-skills --skill rust-quality-gategit clone --depth 1 https://github.com/bobmatnyc/claude-mpm-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/bobmatnyc/claude-mpm-skills/rust-quality-gate)<a href="https://agentmods.dev/skills/bobmatnyc/claude-mpm-skills/rust-quality-gate"><img src="https://agentmods.dev/badge/skills/bobmatnyc/claude-mpm-skills/rust-quality-gate/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/bobmatnyc/claude-mpm-skills/rust-quality-gate"><img src="https://agentmods.dev/badge/skills/bobmatnyc/claude-mpm-skills/rust-quality-gate.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Anti-Refusal · line 69 Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.Fix: Remove instructions that suppress warnings, disclaimers, or ethical commentary. Let the agent surface safety-relevant caveats to the user.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00038 | $0.01785 |
| Opus 5.5 | $0.00015 | $0.00714 |
| Sonnet 5.5 | $0.00008 | $0.00357 |
| Haiku 4.5 | $0.00004 | $0.00178 |
Grade A, and why
rust-quality-gate scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 200 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Rust Quality Gate Protocol
When to Invoke
Invoke this protocol when:
- Any implementation task completes and code changes are ready to commit
- User asks "check quality", "run tests", "run clippy", "is this ready", or "verify"
- Before creating a pull request or merging to main
- After modifying a shared library crate (
trusty-common,trusty-mcp-core,trusty-embedder,trusty-symgraph) - After the rust-qa agent delivers a work product
The Three-Gate Sequence
Run gates in this exact order. Stop on first failure — do not proceed to the next gate.
Gate 1: Format Check (fastest — always run first)
cargo fmt --check
Pass: No output, exit code 0.
Fail: Lists files with formatting differences. Fix with:
cargo fmt
Then re-run cargo fmt --check to confirm clean.
Why first: Format failures are trivially fixable. Running it first avoids wasting clippy and test time on unformatted code.
Gate 2: Clippy Lint Gate
cargo clippy --workspace --all-targets -- -D warnings
Pass: No warnings emitted, exit code 0.
Fail: One or more error[clippy::] lines. Fix each warning the compiler reports. Common patterns:
# Check a single crate faster during iteration
cargo clippy -p trusty-search -- -D warnings
# Check with a specific feature enabled
cargo clippy -p trusty-common --features axum-server -- -D warnings
open-mpm exception: open-mpm has 142 pre-existing clippy errors at HEAD (tracked separately). These errors do not block other work. When running workspace-wide clippy and open-mpm fails, confirm whether the failures are confined to open-mpm only:
# Run clippy on everything except open-mpm to confirm other crates are clean
cargo clippy --workspace --all-targets -- -D warnings 2>&1 | grep -v "open-mpm"
If all errors are in open-mpm, treat the gate as passing for the purpose of non-open-mpm work.
Gate 3: Test Gate
Single-crate (fast — use during iteration):
cargo test -p <crate>
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 200 lines · 38 tokens per session scan A 348f3f8b20d5
rust-quality-gate is a skill published in the GitHub repository bobmatnyc/claude-mpm-skills (79 stars, last pushed 3mo ago), licensed MIT. It adds 38 tokens to every session and 1,785 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
rust-quality-gate compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| rust-quality-gatebobmatnyc/claude-mpm-skills | Skill | 79 | 3mo ago | MIT | A | 38 | Claude Code |
| rust-doctorarthjean/rust-doctor | Skill | 23 | 4d ago | Apache-2.0 | A | 49 | Claude Code, Codex |
| rust-skillsvinhnx/VTCode | Skill | 907 | yesterday | Apache-2.0 | A | 46 | Claude Code, Codex |
| crate-opsvinhnx/VTCode | Skill | 907 | yesterday | Apache-2.0 | A | 62 | Claude Code, Codex |
| rust-reviewliuyanghejerry/Clausura | Skill | 205 | today | MIT | A | 25 | Claude Code, Codex |
| rust-expertpersonamanagmentlayer/pcl | Skill | 45 | 18d ago | Apache-2.0 | A | 60 | Claude Code |
| rust-build-optimizationbahayonghang/my-ai-cli-toolkit | Skill | 17 | 2d ago | MIT | A | 147 | Claude Code |