--- title: "Rust review FP judge: review, role & definition · Undominated.ai" canonical: https://undominated.ai/agents/trailofbits-rust-review-fp-judge/ description: "Pins the rust-review judge that runs after dedup, aborts when it cannot obtain a finding list, and must not invent the SARIF file." --- # Rust review FP judge: review, role & definition · Undominated.ai > Pins the rust-review judge that runs after dedup, aborts when it cannot obtain a finding list, and must not invent the SARIF file. [← Explore all agents](/agents/) SECURITY REVIEW / Trail of Bits # Rust review FP judge Pins the rust-review judge that runs after dedup, aborts when it cannot obtain a finding list, and must not invent the SARIF file. [Use this definition ↓](#setup)[Original source ↗](https://github.com/trailofbits/skills/tree/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/rust-review/agents) SOURCE REVIEW Reviewed 2026-10-14 Evidence 4 linked sources Publisher Trail of Bits Licence [CC-BY-SA-4.0 ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/LICENSE) Revision 8e54050ae63c [Read what was—and wasn’t—checked ↓](#review) “Second-stage Rust review judge that aborts without a finding list, gives one verdict to each merged group, and does not invent SARIF.” [Trail of Bits · upstream description ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/rust-review/agents/rust-review-fp-judge.md) Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - The agents catalogue has no sourcePath for plugins/rust-review/agents/rust-review-fp-judge.md. - The file aborts when the finding list is unavailable, gives one verdict to a merged group, and forbids inventing SARIF or claiming a report exists without a disk check. ### A good fit for - The second rust-review judge pass, after dedup, when the host already has that run's output directory ### Weigh up before choosing - This review did not execute the resource. - A Markdown profile does not register a native subagent by itself. - The command /plugin marketplace add trailofbits/skills adds the marketplace, not one agent. - Step 6 says to finish the report at Step 7, while the headings put the write in Step 5 and the disk check in Step 7. Both places still say to write that report with Bash and not the Write tool. That is a wrong cross-reference, not two write procedures. - The file says absorbed findings do not get their own verdict. Its generator section says a merged finding can be emitted later if the merge target did not survive. That is the generator's fallback, not a second verdict. - The severity labels are the file's own scale. This review did not apply them, and it does not repeat the generator command. - The SARIF generator script was not opened. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - plugins/rust-review/agents/rust-review-fp-judge.md - plugins/rust-review/README.md - README.md - LICENSE ### Our findings - It says not to merge duplicates, to give each merged group exactly one verdict, and not to invoke Skill. - If the findings index is missing and the fallback list returns nothing, it says to abort. If a list was obtained and is empty, and the dedup summary is absent, it says to write both reports for a zero-findings run. - Under the remote threat model, a bug that needs local config, command-line arguments, environment variables, or an existing shell is out of scope, and a non-survivor gets no severity. - It says not to use the Write tool for the report file, not to hand-write SARIF, and not to claim either output exists without checking the files on disk. ### Not established by this review - The resource was not executed and its tools were not called. - No findings directory was supplied. - The bundled SARIF generator was not opened or run. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Use the role in your project. [Upstream setup instructions ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/README.md) DOCUMENTED COMMAND /plugin marketplace add trailofbits/skills Copy command ↗ Copying does not execute this command. It may retrieve a newer version than the reviewed source. - The repository README prints that line with no leading spaces, then /plugin menu on the next fence line. - That command adds the Trail of Bits marketplace. It does not install this agent. - The rust-review README's invoke line names the skill. It is not a single-line install command, so it is not install.command. ### Before you start - Claude Code or Codex marketplace support, which the repository README states - A rust-review orchestrator spawn with an output directory ### Compatibility Claude Code · OpenAI Codex ### Implementation Rust ### Second-stage judge that edits finding frontmatter and writes run reports - Read the run directory and the source locations the findings name - Edit primary finding frontmatter and write the summary under that output directory - The file says not to use Write for the report file and not to invent SARIF if generation fails - Abort when the finding list cannot be obtained ### Cost model CC-BY-SA-4.0; no price is stated for this agent, and it was not run 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - [rust-review-fp-judge ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/rust-review/agents/rust-review-fp-judge.md) Checked 2026-10-14 https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/rust-review/agents/rust-review-fp-judge.md Supports: one verdict per group, abort without a list, and no invented SARIF - [Repository root LICENSE ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/LICENSE) Checked 2026-10-14 https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/LICENSE Supports: Attribution-ShareAlike 4.0 International - [rust-review README ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/rust-review/README.md) Checked 2026-10-14 https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/rust-review/README.md Supports: fp-judge runs second and writes the final reports - [Repository README ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/README.md) Checked 2026-10-14 https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/README.md Supports: CC-BY-SA-4.0 statement and marketplace install line KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### Rust review worker ↗ Pins the rust-review worker that aborts a malformed or primer spawn, writes findings only inside its scope root, and does not filter them by severity.](/agents/trailofbits-rust-review-worker/)[### Adversarial modeler ↗ Pins Trail of Bits' differential-review agent that models high-risk changes and says not to run on low or medium risk diffs.](/agents/trailofbits-adversarial-modeler/)[### Exploitability verifier ↗ Pins the fp-check phase-2 agent that stays read-only while deciding whether a suspected bug is exploitable, and that skips a proof the bug class does not need.](/agents/trailofbits-exploitability-verifier/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)[Workflows ↗](/workflows/) ## Continue your investigation - [Find reusable instructions](/skills/) - [Inspect connections](/mcp-servers/) - [Build a toolkit](/tools/) - [Choose the model](/compare/)