c-review

Review C/C++ codebases for memory corruption, integer overflows, and race conditions.

Updated Nov 23, 2025
One-click install
npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill c-review-manuelbrandner85
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: c-review
Source: https://github.com/manuelbrandner85/Weltenbibliothekapp/tree/main/.agents/skills/c-review
Command: npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill c-review-manuelbrandner85

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires python3, and includes scripts (resource) components.

What problem does it solve?

This skill automates the complex and error-prone process of auditing native C/C++ codebases for critical memory safety and concurrency vulnerabilities.

Core Features & Use Cases

  • Vulnerability Detection: Identifies memory corruption, integer overflows, race conditions, and type confusion.
  • Multi-Stage Analysis: Orchestrates parallel worker agents for code analysis followed by deduplication and false-positive filtering judges.
  • Use Case: Use this skill to perform a comprehensive security audit on a Linux daemon or a C++ service to ensure memory safety and compliance with secure coding standards.

Quick Start

Invoke the c-review skill to perform a high-severity security audit on the current directory using the sonnet model.

Frequently Asked Questions about c-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit C/C++ code for memory corruption and race conditions?

Automated C/C++ security auditing identifies memory corruption, integer overflows, and race conditions by orchestrating parallel worker agents for code analysis, followed by deduplication and false-positive filtering judges to ensure accurate vulnerability discovery.

What is the best way to find integer overflows and type confusion in C++ services?

Finding integer overflows and type confusion in C++ services requires a multi-stage analysis approach that deduplicates findings and filters false positives, satisfying requirements for automated vulnerability discovery in native application codebases.

Does this automated vulnerability discovery tool require python3?

Yes, this automated vulnerability discovery requires python3 as a dependency to execute its scripts. It works with native application codebases including daemons, services, and userspace utilities to ensure memory safety.

Can I use SARIF-compliant reporting for C/C++ security audits?

Yes, C/C++ security audits can generate SARIF-compliant reporting. The multi-stage analysis identifies vulnerabilities, deduplicates findings, and outputs results in a SARIF-compliant format for compliance tracking.

How do I run a high-severity security audit on a Linux daemon?

Running a high-severity security audit on a Linux daemon involves invoking an automated skill against the current directory. This targets native application codebases to identify memory safety and concurrency vulnerabilities.

What are the limitations of automated memory safety reviews for native codebases?

Automated memory safety reviews for native codebases rely on multi-stage analysis with false-positive filtering judges, meaning complex logic errors outside of memory corruption, integer overflows, and race conditions may not be detected.