--- title: "C review worker: review, role & definition · Undominated.ai" canonical: https://undominated.ai/agents/trailofbits-c-review-worker/ description: "Pins the c-review producing worker that reads source, writes one part file, and states that it has no shell." --- # C review worker: review, role & definition · Undominated.ai > Pins the c-review producing worker that reads source, writes one part file, and states that it has no shell. [← Explore all agents](/agents/) SECURITY REVIEW / Trail of Bits # C review worker Pins the c-review producing worker that reads source, writes one part file, and states that it has no shell. [Use this definition ↓](#setup)[Original source ↗](https://github.com/trailofbits/skills/tree/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/c-review/agents) SOURCE REVIEW Reviewed 2026-10-14 Evidence 4 linked sources Publisher Trail of Bits Licence [CC-BY-SA-4.0 ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/LICENSE) Revision 8e54050ae63c [Read what was—and wasn’t—checked ↓](#review) “A c-review worker spawned by the workflow, with Read, Grep, Glob, and Write, and an explicit ban on compiling or editing the reviewed tree.” [Trail of Bits · upstream description ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/c-review/agents/c-review-worker.md) Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - The catalogue has the c-review skill and not this producing worker. - The file is specific that a plan which needs a compiler ends with an empty part file, and that a source edit makes the coverage gate refuse the whole tree. ### A good fit for - One c-review slice inside the Trail of Bits workflow, when the worker must not get a shell - Supply exactly one c-review assignment, unit source and output part path. - Write the part file consumed by the deterministic assembler and return a matching summary. ### Weigh up before choosing - This review did not execute the resource. - The worker says the workflow prompt supplies the schema, ledger rules, and severity table. That prompt was not opened. - It is not a standalone C reviewer. The file says it is spawned by the c-review workflow only. - The Write tool can affect files beyond the designated output unless the host constrains it; no shell means builds and execution are unavailable. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - plugins/c-review/agents/c-review-worker.md - README.md - LICENSE - Round 2: pinned definition, output contract and permission/dependency boundaries reread on 2026-10-14 - plugins/c-review/skills/c-review/SKILL.md (selected input/output and dependency-contract sections; not a full implementation audit) ### Our findings - The description says the worker runs one producing task and has no shell. - Tools are Read, Grep, Glob, and Write. It says Write is for the part file only and that editing the reviewed tree makes the coverage gate refuse every unit. - It says the assembler builds the report from part files, not from the worker's return text, and that this system prompt does not replace the workflow schema. - Coverage is based on reading sites and reconciling the supplied site_counts, not shell-generated guesses. - A changed final response must be reflected in the part file because the assembler reads that artifact and cross-checks the response. ### Not established by this review - The resource was not executed and its tools were not called. - No C source was reviewed. - The workflow prompt and severity table were not opened. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Use the role in your project. [Upstream setup instructions ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/README.md) DOCUMENTED COMMAND /plugin marketplace add trailofbits/skills Copy command ↗ Copying does not execute this command. It may retrieve a newer version than the reviewed source. - The README's marketplace command is the line above, followed by /plugin menu. - The table names c-review as the C and C++ security review plugin. - This worker is not useful without the workflow that spawns it, which was not installed. - Use the matching immutable review-tree workflow and separate run directory; validate the part schema and coverage through the assembler. ### Before you start - Claude Code with the c-review workflow - Source the workflow can read ### Compatibility Claude Code ### Implementation c ### Read and one part-file write; no shell - Read source with Read, Grep, and Glob - Write only the assigned part file - Do not modify the reviewed tree ### Cost model CC-BY-SA-4.0; the worker was not spawned 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - [c-review-worker ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/c-review/agents/c-review-worker.md) Checked 2026-10-14 https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/c-review/agents/c-review-worker.md Supports: no-shell rule and part-file write - [Repository README ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/README.md) Checked 2026-10-14 https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/README.md Supports: marketplace install line and c-review row - [Repository LICENSE ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/LICENSE) Checked 2026-10-14 https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/LICENSE Supports: Attribution-ShareAlike 4.0 International - [Pinned inspected source: plugins/c-review/skills/c-review/SKILL.md ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/c-review/skills/c-review/SKILL.md) Checked 2026-10-14 https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/c-review/skills/c-review/SKILL.md Supports: Dependency setup and source-review boundary KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### Rust review dedup judge ↗ Pins the rust-review dedup judge that merges only obvious duplicates, aborts when the finding list cannot be loaded, and does not declare a shell.](/agents/trailofbits-rust-review-dedup-judge/)[### Adversarial modeler ↗ Pins Trail of Bits' differential-review agent that models high-risk changes and says not to run on low or medium risk diffs.](/agents/trailofbits-adversarial-modeler/)[### Crypto Analyzer ↗ Reviews cryptographic design and code for weak primitives and mishandled keys, and points exploitation elsewhere.](/agents/pentest-crypto-analyzer/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)[Workflows ↗](/workflows/) ## Continue your investigation - [Find reusable instructions](/skills/) - [Inspect connections](/mcp-servers/) - [Build a toolkit](/tools/) - [Choose the model](/compare/)