Struct TrustConfig 

pub struct TrustConfig {
    pub default_level: SkillTrustLevel,
    pub local_level: SkillTrustLevel,
    pub hash_mismatch_level: SkillTrustLevel,
    pub bundled_level: SkillTrustLevel,
    pub scan_on_load: bool,
    pub scanner: ScannerConfig,
}

Skill trust policy configuration, nested under [skills.trust] in TOML.

Controls how trust levels are assigned to skills at load time based on their origin (local filesystem vs network) and integrity (hash verification result).

Example (TOML)

[skills.trust]
default_level = "quarantined"
local_level = "trusted"
scan_on_load = true

Fields

default_level: SkillTrustLevel

Trust level assigned to skills from unknown or remote origins. Default: quarantined.

local_level: SkillTrustLevel

Trust level assigned to skills found on the local filesystem. Default: trusted.

hash_mismatch_level: SkillTrustLevel

Trust level assigned when a skill’s content hash does not match the stored hash. Default: quarantined.

bundled_level: SkillTrustLevel

Trust level assigned to bundled (built-in) skills shipped with the binary. Default: trusted.

scan_on_load: bool

Scan skill body content for injection patterns at load time.

When true, SkillRegistry::scan_loaded() is called at agent startup. This is advisory only — scan results are logged as warnings and do not automatically change trust levels or block tool calls.

Defaults to true (secure by default).

scanner: ScannerConfig

Fine-grained scanner controls (injection patterns, capability escalation).

Trait Implementations

impl Clone for TrustConfig

fn clone(&self) -> TrustConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TrustConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for TrustConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for TrustConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for TrustConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.