mirror of
https://github.com/trailofbits/skills
synced 2026-06-21 14:12:00 +00:00
Dan Guido
ed41cd7ceb
* Import four plugins from skills-internal and clean up README Import seatbelt-sandboxer, supply-chain-risk-auditor, zeroize-audit, and let-fate-decide from skills-internal. Remove dead humanizer and skill-extractor directories. Fold "About Trail of Bits" into the license line. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * Fix CI: shellcheck SC2317 and let-fate-decide description mismatch Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * Import agentic-actions-auditor from skills-internal Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * Fix review issues across 5 imported plugins - Fix empty array expansion crash under set -u on macOS bash 3.2 (emit_rust_mir.sh, emit_asm.sh, emit_ir.sh) - Fix copy-paste error in seatbelt-sandboxer README ("variant analysis") - Remove references to non-existent leak-hunter skill - Update agentic-actions-auditor license to match repo CC-BY-SA-4.0 - Add PEP 723 metadata to check_rust_asm_{aarch64,x86}.py - Replace unsafe xargs trim with parameter expansion in track_dataflow.sh - Add json_escape function to analyze_asm.sh, analyze_heap.sh, track_dataflow.sh for safe JSON construction with backslashes - Add allowed-tools frontmatter to seatbelt-sandboxer and supply-chain-risk-auditor SKILL.md - Add minimum finding count assertions to run_smoke.sh - Fix double period typo in supply-chain-risk-auditor SKILL.md Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
25 lines
883 B
Markdown
25 lines
883 B
Markdown
## Rust Regression Fixtures
|
|
|
|
This directory contains lightweight fixtures and a smoke runner to validate
|
|
Rust-specific detector behavior for:
|
|
|
|
- `check_mir_patterns.py`
|
|
- `check_llvm_patterns.py`
|
|
- `check_rust_asm.py`
|
|
- `semantic_audit.py`
|
|
|
|
### Run
|
|
|
|
```bash
|
|
bash plugins/zeroize-audit/tests/rust-regression/run_smoke.sh
|
|
bash plugins/zeroize-audit/tests/rust-regression/run_mixed_language_smoke.sh
|
|
```
|
|
|
|
### What is validated
|
|
|
|
- MIR: closure/async capture and error-path coverage heuristics
|
|
- LLVM IR: per-symbol volatile-store drops, optional multi-level handling, return/register exposure
|
|
- ASM: caller-saved and callee-saved spill detection with x86-64 guardrails
|
|
- Semantic audit: Drop body field-zeroing evidence, alias/resolved-path conversion escapes, confidence/evidence tags
|
|
- Mixed-language orchestration sanity checks (Wave 2a/2b, Wave 3/3R, Rust report ingestion mappings)
|