--- title: "Rust review worker: review, role & definition · Undominated.ai" canonical: https://undominated.ai/agents/trailofbits-rust-review-worker/ description: "Pins the rust-review worker that aborts a malformed or primer spawn, writes findings only inside its scope root, and does not filter them by severity." --- # Rust review worker: review, role & definition · Undominated.ai > Pins the rust-review worker that aborts a malformed or primer spawn, writes findings only inside its scope root, and does not filter them by severity. [← Explore all agents](/agents/) SECURITY REVIEW / Trail of Bits # Rust review worker Pins the rust-review worker that aborts a malformed or primer spawn, writes findings only inside its scope root, and does not filter them by severity. [Use this definition ↓](#setup)[Original source ↗](https://github.com/trailofbits/skills/tree/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/rust-review/agents) SOURCE REVIEW Reviewed 2026-10-14 Evidence 4 linked sources Publisher Trail of Bits Licence [CC-BY-SA-4.0 ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/LICENSE) Revision 8e54050ae63c [Read what was—and wasn’t—checked ↓](#review) “One Rust review worker that aborts on a malformed spawn prompt, files bugs only inside its scope, and does not drop them for severity.” [Trail of Bits · upstream description ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/rust-review/agents/rust-review-worker.md) Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - The agents catalogue has no sourcePath for plugins/rust-review/agents/rust-review-worker.md. - The file aborts a malformed spawn instead of searching for the assignment, treats a cache primer as a no-tool-call stop, and refuses findings outside the scope root. ### A good fit for - One rust-review cluster assignment that already arrived inline, when findings must stay inside that scope root ### Weigh up before choosing - This review did not execute the resource. - A Markdown profile does not register a native subagent by itself. - The command /plugin marketplace add trailofbits/skills adds the marketplace, not one agent. - The plugin README says consolidated clusters are never chunked. This file still says a consolidated worker runs only the phases named in its spawn prompt when that list is shorter than the cluster file. That is an orchestrator claim plus a conditional rule, not two opposite instructions inside this file. - The file tells the worker not to trust a silent empty search. This record does not repeat the search fallback. - Cluster prompt files were not opened. Bash is declared, and this review did not run it. - Judge fields are listed so the worker will not write them. This review did not run the judges. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - plugins/rust-review/agents/rust-review-worker.md - plugins/rust-review/README.md - README.md - LICENSE ### Our findings - If a required spawn field is missing, or the prompt says to look the assignment up from a task ledger, the file says to stop on the first tool call and not to search the repo, read a prior run, or guess the worker number. - If the spawn prompt contains the cache-primer line, the file says this is not a review, and to make no tool calls. - It calls context roots read-only and says not to file a finding outside the finding scope root. - It says not to apply the severity filter when deciding which confirmed bugs to file. A pass that did not run at the hard cap is not a clean clearance: the file forbids a skipped outcome and says the completion line must show the truncation. ### Not established by this review - The resource was not executed and its tools were not called. - No spawn prompt or Rust tree was supplied. - The cluster prompt files named by the protocol were not opened. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Use the role in your project. [Upstream setup instructions ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/README.md) DOCUMENTED COMMAND /plugin marketplace add trailofbits/skills Copy command ↗ Copying does not execute this command. It may retrieve a newer version than the reviewed source. - The repository README prints that line with no leading spaces, then /plugin menu on the next fence line. - That command adds the Trail of Bits marketplace. It does not install this agent. - The rust-review README's invoke line names the skill. It is not a single-line install command, so it is not install.command. ### Before you start - Claude Code or Codex marketplace support, which the repository README states - A rust-review orchestrator spawn with an output directory ### Compatibility Claude Code · OpenAI Codex ### Implementation Rust ### One cluster worker that writes findings only inside its scope - Read the finding scope and the context roots named in the spawn prompt - Write finding, index, and coverage files under the run output directory - Bash is declared. The file says not to file a finding outside the scope root - Abort instead of recovering a missing assignment or running a cache-primer prompt ### Cost model CC-BY-SA-4.0; no price is stated for this agent, and it was not run 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - [rust-review-worker ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/rust-review/agents/rust-review-worker.md) Checked 2026-10-14 https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/rust-review/agents/rust-review-worker.md Supports: malformed-prompt abort, primer stop, and scope-root limit - [Repository root LICENSE ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/LICENSE) Checked 2026-10-14 https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/LICENSE Supports: Attribution-ShareAlike 4.0 International - [rust-review README ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/rust-review/README.md) Checked 2026-10-14 https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/rust-review/README.md Supports: worker tool set and the statement that consolidated clusters are not chunked - [Repository README ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/README.md) Checked 2026-10-14 https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/README.md Supports: CC-BY-SA-4.0 statement and marketplace install line KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### Rust review FP judge ↗ Pins the rust-review judge that runs after dedup, aborts when it cannot obtain a finding list, and must not invent the SARIF file.](/agents/trailofbits-rust-review-fp-judge/)[### Adversarial modeler ↗ Pins Trail of Bits' differential-review agent that models high-risk changes and says not to run on low or medium risk diffs.](/agents/trailofbits-adversarial-modeler/)[### Exploitability verifier ↗ Pins the fp-check phase-2 agent that stays read-only while deciding whether a suspected bug is exploitable, and that skips a proof the bug class does not need.](/agents/trailofbits-exploitability-verifier/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)[Workflows ↗](/workflows/) ## Continue your investigation - [Find reusable instructions](/skills/) - [Inspect connections](/mcp-servers/) - [Build a toolkit](/tools/) - [Choose the model](/compare/)