C Review

Plugin Active

Comprehensive C/C++ security code review with specialized bug-finding agents covering memory safety, type safety, concurrency, and Linux/Windows userspace-specific issues

1 Skill 0 MCPs

Purpose

To provide developers with a specialized and thorough security code review for native C/C++ projects, identifying critical vulnerabilities before deployment.

Features

Specialized bug-finding agents for C/C++
Multi-stage review process (inventory, analysis, dedup, FP/severity)
Support for Linux and Windows userspace code
Detailed reporting in Markdown and SARIF formats
Configurable threat model and severity filtering

Use Cases

Auditing native C/C++ applications for security flaws
Reviewing daemons and services for memory safety
Hunting for integer overflows, use-after-free, and race conditions
Ensuring platform-specific security in Linux/Windows userspace code

Non-Goals

Reviewing kernel drivers or modules
Analyzing managed languages like Java, C#, Python, Go, or Rust
Operating on embedded/bare-metal code without libc
Providing real-time code completion or editing assistance

Trust

warning:Issues Attention13 issues opened and 4 closed in the last 90 days, indicating a low closure rate and potentially slow maintainer response.

Installation

First, add the marketplace

/plugin marketplace add trailofbits/skills

/plugin install c-review@trailofbits

Contains 1 extensions

Skill (1)

C Review Skill

Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities. Use when auditing native C/C++ applications, reviewing daemons or services for memory safety, or hunting integer overflow / use-after-free / race conditions in userspace code.

Quality Score

75 /100

Analyzed about 17 hours ago

Trust Signals

Last commit3 days ago

GitHub owner trailofbits

Stars5.2k

LicenseCC-BY-SA-4.0

Status

View Source

Similar Extensions

Arm Cortex Microcontrollers

100

ARM Cortex-M firmware development for Teensy, STM32, nRF52, and SAMD with peripheral drivers and memory safety patterns

Plugin

wshobson

Review Agent Governance

Require a human approval signal before an AI agent can post PR reviews, comments, merges, or writes to CI config. Cedar-gated, receipt-signed, designed for the Hermes-style failure mode where a review bot posts without oversight.

Plugin

wshobson

Performance Testing Review

Performance analysis, test coverage review, and AI-powered code quality assessment

Plugin

wshobson

Comprehensive Review

Multi-perspective code analysis covering architecture, security, and best practices

Plugin

wshobson

Skill Improver

Automatically reviews and fixes Claude Code skills through iterative refinement until they meet quality standards. Requires plugin-dev plugin.

Plugin

trailofbits

Everything Claude Code

Battle-tested Claude Code plugin for engineering teams — 60 agents, 228 skills, 75 legacy command shims, production-ready hooks, and selective install workflows evolved through continuous real-world use

Plugin

affaan-m