skills.rest
trailofbits
trailofbitsOFFICIAL
Explore all skills by this author →
Website𝕏@trailofbitsGitHub

rust-review

Audit Rust code for security vulnerabilities across unsafe, concurrency, and FFI boundaries.

6.5k|561|Updated Jan 14, 2026
Search Tags:#code review#concurrency#security audit#memory safety#Rust#unsafe code
One-click install
npx skills add https://github.com/trailofbits/skills --skill rust-review-trailofbits
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: rust-review
Source: https://github.com/trailofbits/skills/tree/main/plugins/rust-review/skills/rust-review
Command: npx skills add https://github.com/trailofbits/skills --skill rust-review-trailofbits

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the comprehensive security review of Rust code, identifying potential vulnerabilities related to unsafe code blocks, memory safety, concurrency, FFI boundaries, and async runtimes.

Core Features & Use Cases

  • Safe/Unsafe Boundary: Audits Rust code for safe/unsafe boundary issues.
  • Memory Safety: Inspects memory safety in unsafe blocks and concurrency hazards.
  • FFI Safety: Checks for safe usage of Foreign Function Interface.
  • Async Runtime: Analyzes asynchronous runtime mistakes.
  • Use Case: Use this Skill when auditing Rust libraries, services, or applications to ensure security-critical code segments adhere to Rust's stringent safety guarantees.

Quick Start

To perform a Rust code security audit, use the command /rust-review:rust-review.

Frequently Asked Questions about rust-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security audit on Rust code with unsafe blocks?▼

To perform a Rust security audit on unsafe blocks, this Skill automatically parses and analyzes safe/unsafe boundaries to identify memory safety violations and vulnerabilities without manual intervention.

What are common concurrency hazards in Rust async runtimes?▼

Concurrency hazards in Rust async runtimes include runtime mistakes and panic-induced Denial of Service (DoS). This Skill analyzes asynchronous code segments to detect these specific safety issues.

How do I check FFI safety in a Rust library?▼

To check FFI safety in a Rust library, this Skill inspects Foreign Function Interface boundaries for safe usage. It audits how external code interacts with Rust to prevent memory safety violations.

Can I audit Rust crates for panic-induced Denial of Service vulnerabilities?▼

Yes, you can audit Rust crates for panic-induced Denial of Service vulnerabilities. The Skill performs in-depth review to identify panic conditions that could lead to DoS attacks.

Does this automated Rust code review require manual intervention?▼

No, this automated Rust code review requires parsing and analyzing code without manual intervention. It autonomously audits safe/unsafe boundaries, memory safety, concurrency, FFI, and async runtime mistakes.

Related Skills

Explore More Software Engineering Skills→
YukiIto1999YukiIto1999

reverse-engineering-rust-malware

Identify Rust-compiled malware binaries and extract crate dependencies and suspicious patterns.

Community
Advanced
CallMeLuigiv2CallMeLuigiv2

m15-anti-pattern

Identify and explain Rust anti-patterns during code reviews.

Community
Intermediate
fatihkanfatihkan
7

sc-lang-rust

Scan Rust codebases for unsafe blocks, FFI misuse, and concurrency hazards.

Community
Advanced
vertivolatamvertivolatam
1

Static Analysis

Run static analysis across multiple programming languages with linters and security scanners.

Official
Advanced