trailofbits/skills✦ 精选0°

c-review

仓库创建 2026年1月15日最近提交 6 天前SkillHot 收录 20 天前

⬈ GitHub 仓库 ⬈ SKILL.md 原文件 ⬇ Raw 原始文件

▸ 精选理由

有多角色子代理架构，可组织复杂审计、去重与误报判定流程

▸ 风险提示

可能需要编译/运行目标代码和外部检测器，存在执行不信任代码风险

这个 Skill 做什么

对 C/C++ 代码进行全面安全审计，发现内存、溢出、竞态等漏洞

对 C/C++ 代码做全面安全审计，重点寻找内存破坏、整数溢出、use-after-free、竞态条件等漏洞。适用于审查原生应用、守护进程或任何对内存安全敏感的代码库。特别擅长识别平台相关差异带来的风险，并提供复现与修复路径。

▸ 展开 SKILL.md 英文原文

Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities. Use when auditing native C/C++ applications, reviewing daemons or services for memory safety, or hunting integer overflow / use-after-free / race conditions in userspace code.

开发编程C/C++内存安全审计流程多工协同通用

6.3k

Stars

542

Forks

仓库内 Skill

+270

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/trailofbits/skills/main/plugins/c-review/skills/c-review/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/trailofbits/skills/main/plugins/c-review/skills/c-review/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

# C/C++ Security Review

Runs in the main conversation (invoke via `/c-review:c-review`). Orchestrator owns the `Task*` ledger as bookkeeping for retries; workers and judges have no Task tools. Workers and judges are named plugin subagents (`c-review:c-review-worker`, `c-review:c-review-dedup-judge`, `c-review:c-review-fp-judge`); tool sets are declared in `plugins/c-review/agents/*.md`. Findings are exchanged via markdown-with-YAML files in a shared output directory.

## When to Use

Native C/C++ application security review: memory safety, integer overflow, races, type confusion, Linux/macOS daemons, Windows userspace services.

## When NOT to Use

- Kernel drivers/modules (Linux, Windows,

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有