RUST SECURITY AUDITOR

Local · Read-only · Human review required

中文 GitHub

LOCAL REVIEW FOLIO / APACHE-2.0

Review the Rust your agent just wrote.

A local, read-only MCP server for reviewing unsafe code, FFI boundaries, Cargo metadata, build surfaces, supply-chain signals, and diffs.

Findings are review obligations, not confirmed vulnerabilities.
src/ffi/bindings.rs+28 −6
98  pub fn from_env() -> Result<Self> {99-   let key = std::env::var("API_KEY")?;100+   let raw = std::slice::from_raw_parts(ptr, len);101+   process(raw);102    Ok(())103  }

Drag through the patch. Evidence appears where the review surface changes.

UNSAFE

FFI

CARGO

BUILD

SUPPLY CHAIN

DIFF

RESPONSIBLE USE

Findings are review obligations, not confirmed vulnerabilities.

Inspect the source