rust-review

仓库创建 2026年1月15日最近提交 6 天前SkillHot 收录 20 天前

▸ 精选理由

系统化覆盖 Rust 特有的安全风险，适合审计库和关键服务代码。

这个 Skill 做什么

对 Rust 代码进行深入的安全审查，聚焦 unsafe、并发、FFI 和 panic 问题。

对 Rust 代码做深入的安全审查，重点检查 unsafe 边界、unsafe 块内的内存安全、并发竞态、FFI 交互和 panic 导致的可用性问题。适合审计含 unsafe、跨语言接口或复杂并发逻辑的 crates、服务或库。特别会关注 async/runtime 的误用与 panic 传播风险，并给出具体修复建议。

▸ 展开 SKILL.md 英文原文

Performs comprehensive Rust security review for safe/unsafe boundary issues, memory safety in unsafe blocks, concurrency hazards, panic-induced DoS, FFI safety, and async runtime mistakes. Use when auditing Rust crates, services, or libraries — particularly those with `unsafe`, FFI, or concurrent code.

开发编程Rust安全代码审计unsafe审查通用

6.3k

Stars

542

Forks

仓库内 Skill

+270

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/trailofbits/skills/main/plugins/rust-review/skills/rust-review/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/trailofbits/skills/main/plugins/rust-review/skills/rust-review/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

# Rust Security Review

Runs in the main conversation (invoke via `/rust-review:rust-review`). Orchestrator owns the `Task*` ledger as bookkeeping for retries; workers and judges have no Task tools. Workers and judges are named plugin subagents (`rust-review:rust-review-worker`, `rust-review:rust-review-dedup-judge`, `rust-review:rust-review-fp-judge`); tool sets are declared in `plugins/rust-review/agents/*.md`. Findings are exchanged via markdown-with-YAML files in a shared output directory.

## When to Use

Rust application/library security review: safe/unsafe boundary auditing, memory safety in `unsafe` blocks, concurrency hazards, panic-induced DoS on servers, FFI safety, async-runtime

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有