← Back to Skills Marketplace
82
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install nm-pensive-rust-review
Description
Rust code audit: unsafe blocks, ownership patterns, and Cargo dependency security scanning
Usage Guidance
This skill appears to be a coherent Rust code-audit instruction pack, but check two things before installing: (1) confirm why it requires the config paths night-market.pensive:shared and night-market.imbue:proof-of-work — ask the publisher what data those configs contain and whether they grant access to unrelated settings, and (2) ensure your environment has the expected local tools (cargo, cargo-audit, cargo-outdated, cargo-deny) because the SKILL.md expects running those commands even though no binaries are declared. Also be cautious about installing the separate 'Claude Code' plugin the README mentions—treat that as a separate component to vet because it may add hooks or networked features.
Capability Analysis
Type: OpenClaw Skill
Name: nm-pensive-rust-review
Version: 1.0.0
The skill bundle is a comprehensive Rust code audit tool designed to assist an AI agent in reviewing ownership patterns, concurrency, unsafe blocks, and security vulnerabilities. It provides detailed modules for identifying anti-patterns like SQL injection (modules/sql-injection.md), improper error handling (modules/error-handling.md), and inefficient collection usage (modules/collection-types.md). The inclusion of shell commands for cargo auditing (modules/cargo-dependencies.md) is consistent with its stated purpose of dependency security scanning.
Capability Tags
Capability Assessment
Purpose & Capability
The name, description, and modules align with a Rust audit (ownership, unsafe, dependency scanning). However the SKILL.md expects running cargo commands (cargo audit/tree/outdated) and a CLI-style invocation (/rust-review) yet the registry metadata lists no required binaries — a small mismatch. Also the declared required config paths (night-market.pensive:shared, night-market.imbue:proof-of-work) are not explained by the audit purpose and look unrelated.
Instruction Scope
Runtime instructions focus on code review steps (ownership, unsafe, concurrency, cargo audits) and recommend running local cargo tools and recording an evidence log. They do not instruct reading unrelated system files or contacting external endpoints; the scope stays within reviewing source and running local tooling.
Install Mechanism
This is instruction-only with no install spec and no code files to write to disk, which is the lowest-risk install mechanism. The SKILL.md mentions (optionally) an external 'Claude Code' plugin for additional features, which would be a separate install and should be inspected separately.
Credentials
No environment variables or credentials are requested (good), but the two required config paths (night-market.pensive:shared and night-market.imbue:proof-of-work) are unexpected for a Rust code auditor and are not justified in the documentation. The 'proof-of-work' config name in particular is opaque and may indicate access to unrelated agent configuration — ask what those configs contain and why they're required.
Persistence & Privilege
The skill does not request always:true and is user-invocable (normal). It does not declare modifications to other skills or system-wide settings. Autonomous invocation is allowed by default but is not combined here with broad credentials or always:true.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install nm-pensive-rust-review - After installation, invoke the skill by name or use
/nm-pensive-rust-review - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of rust-review skill for Rust code audits.
- Provides expert-level review focusing on unsafe blocks, ownership patterns, and dependency security.
- Includes detailed workflow and checklist for safety, correctness, performance, and idiomatic Rust patterns.
- Supports modular, progressive review (ownership, error handling, concurrency, unsafe, dependencies).
- Output format specified for clear audit reporting and recommendations.
- Special requirements: relies on "night-market.pensive:shared" and "night-market.imbue:proof-of-work" configuration.
Metadata
Frequently Asked Questions
What is Nm Pensive Rust Review?
Rust code audit: unsafe blocks, ownership patterns, and Cargo dependency security scanning. It is an AI Agent Skill for Claude Code / OpenClaw, with 82 downloads so far.
How do I install Nm Pensive Rust Review?
Run "/install nm-pensive-rust-review" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Nm Pensive Rust Review free?
Yes, Nm Pensive Rust Review is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Nm Pensive Rust Review support?
Nm Pensive Rust Review is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Nm Pensive Rust Review?
It is built and maintained by athola (@athola); the current version is v1.0.0.
More Skills