--- title: "Rust review: review, setup & limitations · Undominated.ai" canonical: https://undominated.ai/skills/trailofbits-rust-review/ description: "Reviews Rust unsafe, FFI and concurrency, and lists rationalisations the reviewer must reject." --- # Rust review: review, setup & limitations · Undominated.ai > Reviews Rust unsafe, FFI and concurrency, and lists rationalisations the reviewer must reject. [← Explore all skills](/skills/) SECURITY REVIEW / Trail of Bits # Rust review Reviews Rust unsafe, FFI and concurrency, and lists rationalisations the reviewer must reject. [See setup guidance ↓](#setup)[Original source ↗](https://github.com/trailofbits/skills/tree/82fe8226252622fa807643bdca1710901198553a/plugins/rust-review/skills/rust-review) SOURCE REVIEW Reviewed 2026-10-14 Evidence 4 linked sources Publisher Trail of Bits Licence [CC-BY-SA-4.0 ↗](https://github.com/trailofbits/skills/blob/82fe8226252622fa807643bdca1710901198553a/LICENSE) Revision 82fe82262526 [Read what was—and wasn’t—checked ↓](#review) “Performs comprehensive Rust security review for safe/unsafe boundary issues, memory safety in unsafe blocks, concurrency hazards, panic-induced DoS, FFI safety, and async runtime mistakes. Use when auditing Rust crates, services, or libraries — particularly those with `unsafe`, FFI, or concurrent code.” [Trail of Bits · upstream description ↗](https://github.com/trailofbits/skills/blob/82fe8226252622fa807643bdca1710901198553a/plugins/rust-review/skills/rust-review/SKILL.md) Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - The definition has both When to Use and When NOT to Use headings. - A Rationalizations to Reject heading is present, so a clean reading is not the same as a pass. ### A good fit for - Reviewing a Rust crate that contains unsafe or FFI - Separating a Rust audit from a generic code review - Audit unsafe boundaries, FFI, concurrency and async behavior with a reproducible cluster plan ### Weigh up before choosing - CC-BY-SA-4.0 requires share-alike and attribution for an adaptation you redistribute. - No crate was audited in this review. - Capability flags decide review coverage; a wrong has-unsafe or has-concurrency value can omit relevant clusters. Safe Rust does not imply all security classes are absent. - The orchestrated procedure requires sibling prompts, agents and scripts; install the complete plugin. Unjudged findings remain unvalidated even when reports exist. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - plugins/rust-review/skills/rust-review/SKILL.md - README.md - LICENSE - plugins/rust-review/scripts/build_run_plan.py ### Our findings - Description names unsafe boundaries, panic-induced DoS, FFI and async mistakes. - Headings include Orchestration Workflow. - The planner CLI and worker-output paths were inspected: explicit capability booleans select clusters and generated prompts preserve finding scope separately from context. - The dedup judge and the false-positive judge run in separate messages, in that order, and Phase 8 still runs when the index is empty. ### Not established by this review - The skill was not executed inside a host agent. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Add a skill to your workflow. [Upstream setup instructions ↗](https://github.com/trailofbits/skills/blob/82fe8226252622fa807643bdca1710901198553a/README.md) DOCUMENTED COMMAND /plugin marketplace add trailofbits/skills Copy command ↗ Copying does not execute this command. It may retrieve a newer version than the reviewed source. - In Claude Code, add the upstream marketplace, then use /plugin menu to select the rust-review plugin. Adding a marketplace alone does not install a plugin. - The marketplace command follows upstream HEAD. To reproduce this review, obtain revision 82fe8226252622fa807643bdca1710901198553a and configure the complete checked-out plugin through the host’s local-plugin workflow. - Keep the whole plugin, including its references, scripts and named agents; inspect its tool access before an authorized task. ### Before you start - The entire rust-review plugin, uv, Rust source and a host supporting its named agents and task protocol. ### Compatibility Claude Code plugin workflow · Other hosts require compatible plugin/tool support ### Local Markdown instructions - Read the installed skill files - Read crate and context source, execute local planning/report helpers, spawn analysis agents and write run evidence. ### Cost model Source is free to read under the stated licence. A host agent may charge for use. 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - [Skill definition ↗](https://github.com/trailofbits/skills/blob/82fe8226252622fa807643bdca1710901198553a/plugins/rust-review/skills/rust-review/SKILL.md) Checked 2026-10-14 https://github.com/trailofbits/skills/blob/82fe8226252622fa807643bdca1710901198553a/plugins/rust-review/skills/rust-review/SKILL.md Supports: Workflow and stated scope - [Repository licence ↗](https://github.com/trailofbits/skills/blob/82fe8226252622fa807643bdca1710901198553a/LICENSE) Checked 2026-10-07 https://github.com/trailofbits/skills/blob/82fe8226252622fa807643bdca1710901198553a/LICENSE Supports: Redistribution terms - [Install instructions ↗](https://github.com/trailofbits/skills/blob/82fe8226252622fa807643bdca1710901198553a/README.md) Checked 2026-10-07 https://github.com/trailofbits/skills/blob/82fe8226252622fa807643bdca1710901198553a/README.md Supports: Documented install path - [plugins/rust-review/scripts/build_run_plan.py ↗](https://github.com/trailofbits/skills/blob/82fe8226252622fa807643bdca1710901198553a/plugins/rust-review/scripts/build_run_plan.py) Checked 2026-10-14 https://github.com/trailofbits/skills/blob/82fe8226252622fa807643bdca1710901198553a/plugins/rust-review/scripts/build_run_plan.py Supports: review, limitations, access, install KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### Algorand vulnerability scanner ↗ Pins Trail of Bits' Algorand scanner, which treats a short or empty coverage table as an unfinished scan and does not let a clean Tealer run stand in for patterns it never examined.](/skills/trailofbits-algorand-vulnerability-scanner/)[### CodeQL ↗ Drives a CodeQL scan and warns that each Bash call is a fresh shell, so state must be written to files.](/skills/trailofbits-codeql/)[### False Positive Check ↗ Forces a true-positive or false-positive verdict on one suspected bug, and refuses to be used as a bug hunter.](/skills/trailofbits-fp-check/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)[Workflows ↗](/workflows/) ## Continue your investigation - [Choose a toolkit](/tools/) - [Inspect execution hosts](/agents/) - [Check tool access](/mcp-servers/) - [Check project dependencies](/check-repo/)