Scan Rust codebases for unsafe blocks, FFI misuse, and concurrency hazards.
npx skills add https://github.com/fatihkan/badi --skill sc-lang-rust-fatihkan
Please help me install this Agent Skill. Skill: sc-lang-rust Source: https://github.com/fatihkan/badi/tree/main/.claude/skills/security-check/sc-lang-rust Command: npx skills add https://github.com/fatihkan/badi --skill sc-lang-rust-fatihkan
Rust codebases can harbor subtle security flaws even with Rust's safety guarantees. This skill identifies Rust-specific security anti-patterns, focusing on unsafe blocks, FFI boundaries, concurrency hazards, and other patterns that undermine Rust's safety guarantees.
Run a Rust project security scan to detect unsafe blocks, FFI misuse, and concurrency hazards.
High-intent search queries and answers about installing and using this skill.
To scan Rust code for unsafe blocks and FFI misuse, run a project security scan that detects unchecked unsafe blocks, validates unsafe C bindings, and produces structured findings based on the Rust Security Checklist.
Rust async tasks and multi-threaded code can harbor concurrency hazards like data races and improper synchronization, which undermine Rust's safety guarantees and lead to undefined behavior if not properly validated.
Yes, you can integrate this Rust security scan into CI pipelines to catch security regressions in Rust crates before merge, checking for unsafe code, FFI boundaries, and concurrency hazards automatically.
Rust static analysis covers third-party crate risks and external interfaces by scanning codebases that rely on unsafe code and FFI, identifying unsafe interactions at C/Rust borders that may introduce undefined behavior.
Rust code still has memory safety issues because unsafe blocks, FFI boundary violations, and invariant breaches bypass Rust's safety guarantees, introducing subtle security flaws and undefined behavior into the codebase.
The best way to audit unsafe Rust code for invariant violations is to scan against the Rust Security Checklist, which detects unchecked unsafe blocks and flags patterns that undermine memory safety guarantees.
zhangzhang-111-iScan repositories for environment variable and secret leaks.
matteocervelliGenerate project assessment Markdown reports from structured JSON data.
YukiIto1999Identify Rust-compiled malware binaries and extract crate dependencies and suspicious patterns.
seb1nProbe live web applications and APIs for vulnerabilities using OWASP ZAP and Nuclei.
