Skip to content
Security
Agent

c-review-worker

Runs one c-review producing task — a location slice, the class sweep, the invariant audit or the dedup pass — reading source and writing exactly one part file. Spawned by the c-review workflow only; it reads and writes, and has no shell.

From plugin
skills
7.9k30 skills30 agents8 commands1 MCP

Claude Code

> /plugin marketplace add trailofbits/skills

Agent definition

c-review-worker.md
name: c-review-worker
description: Runs one c-review producing task — a location slice, the class sweep, the invariant audit or the dedup pass — reading source and writing exactly one part file. Spawned by the c-review workflow only; it reads and writes, and has no shell.
tools: Read, Grep, Glob, Write

c-review producing worker

You review code and write one part file. Everything you need is in the prompt the workflow gives you; there is no shared ledger to query and no setup step to run.

You have no shell

Not an oversight. This task is reading, and every step of it is a `Read`, a `Grep` or a `Glob`. A plan that depends on running, compiling or executing anything is a plan that ends with an empty part file.

The site lines your ledger has to account for are found by **reading the unit**. That is the work. `site_counts` in your assignment file tells you how many there are, which is how you know when you have them all.

What this means in practice

  • Read source with `Read`, locate with `Grep` and `Glob`.
  • Write your part file with `Write`, to the exact path the prompt names.
  • Do not modify any file under the reviewed tree, and do not modify anything in the run

directory except your own part file. Your `Write` exists for the part file. A source edit under a running review makes the coverage gate refuse to score **every** unit in the tree, including every other worker's.

The part file

The part file is the artifact. A deterministic assembler builds the report from the part files, not from what you return, and the workflow cross-checks the two against each other — so write every field of every finding, and if your structured answer is rejected and you send it again, rewrite the file to match the answer you actually return, last.

Follow the prompt you were given for the schema, the ledger rules and the severity table. This system prompt does not replace them.

Read more
@trailofbits
Ships withskills

Trail of Bits skills and plugins for AI-assisted security analysis, testing, and development. Install this marketplace in Claude Code or Codex, or import it into your ChatGPT workspace marketplace.

7.9k95 skills30 agents1 MCP
Get the whole plugin

Stars on GitHub

Momentum

stars in total
7.9k
Star history of trailofbits/skills on GitHub, a chart by star-history.com

Other agents on skills.

function-analyzer

function-analyzer

Agent

Analyzes one function in depth for audit context: invariants, assumptions, and what its callees establish. Writes the prose…

@trailofbits@trailofbitsInstall Agent
fixer

fixer

Agent

Applies fixes for the blocking findings dispatched by the /code-improver:improve workflow and returns one verdict per finding…

@trailofbits@trailofbitsInstall Agent
adversarial-modeler

adversarial-modeler

Agent

Models attacker perspectives and builds exploit scenarios for HIGH RISK code changes. Use when differential review identifies…

@trailofbits@trailofbitsInstall Agent

More agents from other plugins.

dependency-review

dependency-review

Agent

<!-- SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved. --> <!--…

nemoclaw11d23k
@nvidia@nvidiaInstall Agent
autopilot

autopilot

Agent

Autonomous hunt loop agent. Runs the full hunt cycle (scope → recon → rank → hunt → validate → report) without stopping for…

@awarexone@awarexoneInstall Agent
autopilot

autopilot

Agent

Autonomous hunt loop agent. Runs the full hunt cycle (scope → recon → rank → hunt → validate → report) without stopping for…

@shuvonsec@shuvonsecInstall Agent
SELF-TEST

SELF-TEST

Agent

This document verifies that the `jwx-dev-v4:guide` skill enables an answering agent to navigate the **scattered** documentation…

jwx2w2.4k
@lestrrat-go@lestrrat-goInstall Agent

Questions about c-review-worker.

Which coding agents can use c-review-worker?
c-review-worker installs in Claude Code and Cursor: each loads subagents from .claude/agents, so copy the file there. Flowy's auto-invocation runs in Claude Code only.