Rust Unsafe Auditorv1.0.0

Before publishing a Rust crate to crates.io, this skill audits all unsafe code to ensure memory safety and soundness, preventing vulnerabilities and undefined behavior in the wild. It validates safety invariants, raw pointer usage, FFI boundaries, and Send/Sync implementations to meet community standards.

When auditing third-party Rust dependencies for a security-conscious organization, this skill provides a systematic review of unsafe code to identify potential memory safety issues, unsafe FFI boundaries, and unsound abstractions that could be exploited. It helps ensure supply chain security.

For organizations with a strict policy on unsafe code usage, this skill audits the codebase to ensure compliance with 'forbid(unsafe_code)' or documented exceptions. It flags undocumented unsafe blocks and unsafe functions lacking safety contracts, helping maintain code quality and developer discipline.

Before a major release of a Rust-based product, this skill performs a comprehensive memory safety audit of all unsafe code to catch latent bugs that could cause crashes or vulnerabilities. It verifies correctness of raw pointers, FFI interactions, and concurrency primitives.

During the migration of a legacy C/C++ codebase to Rust, this skill reviews unsafe FFI bindings and raw pointer operations in the new Rust code, ensuring that the interoperability layer is sound and free of common pitfalls like double-frees or panic-across-FFI.

Offer a free basic audit with a few automated checks (e.g., unsafe census) and a premium tier with full deep analysis, detailed reports, and integration with CI/CD. Revenue comes from subscription fees for premium features and monthly/annual plans.

Provide expert consultants who use the skill to audit Rust codebases for clients, delivering comprehensive reports, remediation guidance, and training. Revenue is generated through consulting engagements, billed hourly or per project.

Build a SaaS platform that integrates the skill into CI pipelines, providing continuous monitoring of unsafe code and automated alerts. Offer tiered pricing based on number of repositories, audit frequency, and report detail.