rust-invariants

Nine non-negotiable Skill Doctor product invariants.

IndexedApache-2.0★ 13

Install

Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.

npx agentmarket install skill/kalarislabs-rust-invariants

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

About

Nine non-negotiable Skill Doctor product invariants. Use when changing scan defaults, scoring, features, networking, LLM/MCP paths, CLI flags, or anything that could weaken determinism or additive-only behavior.

Use cases: ml, agent-building

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.

Tools: No tools found
Secrets: None asked for
Install scripts: None found

Network hosts it talks to 1

codeload.github.com · found in install command

Files it touches

~/.claude/skills/rust-invariants

What's inside

Skill name: rust-invariants
Description: Nine non-negotiable Skill Doctor product invariants. Use when changing scan defaults, scoring, features, networking, LLM/MCP paths, CLI flags, or anything that could weaken determinism or additive-only behavior.
License: Apache-2.0
Instructions: 24 lines in SKILL.md · view on GitHub

Files (1)

SKILL.md

SKILL.md (first lines)

# Invariants — stop and redesign if a change breaks one

1. **Rust-only product runtime.** npm is a binary installer. Node never scans.
2. **No mandatory LLM.** Default is `--offline --deterministic`. L1 needs zero network, zero key.
3. **Additive-only.** L2 may add findings or raise confidence. L2 may never delete or downgrade L1.
4. **Determinism.** Two `--deterministic` runs → identical JSON/SARIF bytes (sorted maps, pinned time, sorted walks).
5. **Rules compiled at build time** in `skill-doctor-rules`. Never per scan.
6. **SD-11.** Any bytes sent to any model pass through `skill-doctor-neutralize` first.
7. **Secrets.** Emit environment *key names* only, never values.
8. **CLI-first.** TUI is feature `tui` plus an explicit flag. Never default.
9. **Four frozen contributions.** Do not invent SD-12 or a fifth claim.

## Tests that must exist

- `cargo tree -e features -p skill-doctor` has no LLM crate on default features.
- Table test: L1 CRITICAL survives an L2 verdict of "benign".
- Two deterministic JSON reports, equal SHA-256.
- Neutralize is not a no-op on bidi / zero-width / homoglyph fixtures.

## CI grep (keep in ci.yml)

Fail the job if default-path sources match forbidden OpenAI or Anthropic SDK imports.

From KalarisLabs/Skill-Doctor, Apache-2.0.

Signals

Stars: 13
Forks: 1
Open issues: 30
Last commit (this folder): Sep 10, 2026 (1 month ago)
Last release: Sep 12, 2026 (1 month ago)

From GitHub (fetched Oct 24, 2026).

Details

License: Apache-2.0
Repository: github.com/KalarisLabs/Skill-Doctor
Website: github.com/KalarisLabs/Skill-Doctor
First seen: Oct 24, 2026
Last checked: Oct 24, 2026
Source: GitHub github-graphql

More from KalarisLabs

Cite this page

rust-invariants skill. Agent Mart. https://agentmart.dev/skills/kalarislabs-rust-invariants (last updated 2026-10-24)