You need to explicitly install these tools, so you can't "accidentally" invoke cargo-buidl from a transitive dependency or anything.

It's not like a tool like npx which will allow you to invoke code in arbitrary packages.