SECURITY REVIEW / Trail of Bits
C review worker
Pins the c-review producing worker that reads source, writes one part file, and states that it has no shell.
“A c-review worker spawned by the workflow, with Read, Grep, Glob, and Write, and an explicit ban on compiling or editing the reviewed tree.”
01 / THE REASONING
Why this made the selection.
- The catalogue has the c-review skill and not this producing worker.
- The file is specific that a plan which needs a compiler ends with an empty part file, and that a source edit makes the coverage gate refuse the whole tree.
02 / THE REVIEW RECORD
What we actually inspected.
Source review has boundaries.
A clear record is more useful than a “safe” badge.
Material inspected
- plugins/c-review/agents/c-review-worker.md
- README.md
- LICENSE
- Round 2: pinned definition, output contract and permission/dependency boundaries reread on 2026-10-14
- plugins/c-review/skills/c-review/SKILL.md (selected input/output and dependency-contract sections; not a full implementation audit)
Our findings
- The description says the worker runs one producing task and has no shell.
- Tools are Read, Grep, Glob, and Write. It says Write is for the part file only and that editing the reviewed tree makes the coverage gate refuse every unit.
- It says the assembler builds the report from part files, not from the worker's return text, and that this system prompt does not replace the workflow schema.
- Coverage is based on reading sites and reconciling the supplied site_counts, not shell-generated guesses.
- A changed final response must be reflected in the part file because the assembler reads that artifact and cross-checks the response.
Not established by this review
- The resource was not executed and its tools were not called.
- No C source was reviewed.
- The workflow prompt and severity table were not opened.
The review applies to the material and revision named here. A newer upstream release can change its behavior.
03 / PUT IT TO WORK
Use the role in your project.
DOCUMENTED COMMAND
/plugin marketplace add trailofbits/skillsCopying does not execute this command. It may retrieve a newer version than the reviewed source.
- The README's marketplace command is the line above, followed by /plugin menu.
- The table names c-review as the C and C++ security review plugin.
- This worker is not useful without the workflow that spawns it, which was not installed.
- Use the matching immutable review-tree workflow and separate run directory; validate the part schema and coverage through the assembler.
Before you start
- Claude Code with the c-review workflow
- Source the workflow can read
04 / FOLLOW THE EVIDENCE
The source trail.
Our notes are separate from the original resource.
Check upstream before adopting a new version.
- c-review-worker ↗Checked
https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/c-review/agents/c-review-worker.md
Supports: no-shell rule and part-file write
- Repository README ↗Checked
https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/README.md
Supports: marketplace install line and c-review row
- Repository LICENSE ↗Checked
https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/LICENSE
Supports: Attribution-ShareAlike 4.0 International
https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/c-review/skills/c-review/SKILL.md
Supports: Dependency setup and source-review boundary