SECURITY REVIEW / Trail of Bits
Rust review worker
Pins the rust-review worker that aborts a malformed or primer spawn, writes findings only inside its scope root, and does not filter them by severity.
“One Rust review worker that aborts on a malformed spawn prompt, files bugs only inside its scope, and does not drop them for severity.”
01 / THE REASONING
Why this made the selection.
- The agents catalogue has no sourcePath for plugins/rust-review/agents/rust-review-worker.md.
- The file aborts a malformed spawn instead of searching for the assignment, treats a cache primer as a no-tool-call stop, and refuses findings outside the scope root.
02 / THE REVIEW RECORD
What we actually inspected.
Source review has boundaries.
A clear record is more useful than a “safe” badge.
Material inspected
- plugins/rust-review/agents/rust-review-worker.md
- plugins/rust-review/README.md
- README.md
- LICENSE
Our findings
- If a required spawn field is missing, or the prompt says to look the assignment up from a task ledger, the file says to stop on the first tool call and not to search the repo, read a prior run, or guess the worker number.
- If the spawn prompt contains the cache-primer line, the file says this is not a review, and to make no tool calls.
- It calls context roots read-only and says not to file a finding outside the finding scope root.
- It says not to apply the severity filter when deciding which confirmed bugs to file. A pass that did not run at the hard cap is not a clean clearance: the file forbids a skipped outcome and says the completion line must show the truncation.
Not established by this review
- The resource was not executed and its tools were not called.
- No spawn prompt or Rust tree was supplied.
- The cluster prompt files named by the protocol were not opened.
The review applies to the material and revision named here. A newer upstream release can change its behavior.
03 / PUT IT TO WORK
Use the role in your project.
DOCUMENTED COMMAND
/plugin marketplace add trailofbits/skillsCopying does not execute this command. It may retrieve a newer version than the reviewed source.
- The repository README prints that line with no leading spaces, then /plugin menu on the next fence line.
- That command adds the Trail of Bits marketplace. It does not install this agent.
- The rust-review README's invoke line names the skill. It is not a single-line install command, so it is not install.command.
Before you start
- Claude Code or Codex marketplace support, which the repository README states
- A rust-review orchestrator spawn with an output directory
04 / FOLLOW THE EVIDENCE
The source trail.
Our notes are separate from the original resource.
Check upstream before adopting a new version.
- rust-review-worker ↗Checked
https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/rust-review/agents/rust-review-worker.md
Supports: malformed-prompt abort, primer stop, and scope-root limit
- Repository root LICENSE ↗Checked
https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/LICENSE
Supports: Attribution-ShareAlike 4.0 International
- rust-review README ↗Checked
https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/rust-review/README.md
Supports: worker tool set and the statement that consolidated clusters are not chunked
- Repository README ↗Checked
https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/README.md
Supports: CC-BY-SA-4.0 statement and marketplace install line