C/C++ Security Review Runs in the main conversation (invoke via /c-review:c-review ). Orchestrator owns the Task ledger as bookkeeping for retries; workers and judges have no Task tools. Workers and judges are named plugin subagents ( c-review:c-review-worker , c-review:c-review-dedup-judge , c-review:c-review-fp-judge ); tool sets are declared in plugins/c-review/agents/.md . Findings are exchanged via markdown-with-YAML files in a shared output directory. When to Use Native C/C++ application security review: memory safety, integer overflow, races, type confusion, Linux/macOS daemons, Windows userspace services. When NOT to Use Kernel drivers/modules (Linux, Windows, macOS). Managed languages (Java, C#, Python, Go, Rust). Embedded/bare-metal code without libc. Subagents Show more
c-review
安装
npx skills add https://github.com/trailofbits/skills --skill c-review