The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill generates a Cargo.toml file that includes dependencies on several external Rust crates from the standard registry, including rmcp, tokio, serde, axum, and tracing. These are legitimate libraries required for the project's stated purpose.
[INDIRECT_PROMPT_INJECTION]: The skill contains a surface for indirect injection as it interpolates user input into code templates.
Ingestion points: User-provided project name, description, tool names, and tool descriptions in SKILL.md.
Boundary markers: None identified in the provided templates.
Capability inventory: The generated server has network capabilities (HTTP/SSE) and tool execution logic.
Sanitization: No explicit sanitization or escaping logic is present in the templates to handle malicious user input that might attempt to break out of Rust string literals.
[COMMAND_EXECUTION]: The README and project structure templates include standard shell commands for building, testing, and running Rust applications using cargo. These are intended for user execution during the development process and do not represent silent or unauthorized command execution by the agent.

rust-mcp-server-generator