Subagent

C Review Worker

Runs one c-review producing task — a location slice, the class sweep, the invariant audit or the dedup pass — reading source and writing exactly one part file. Spawned by the c-review workflow only; it reads and writes, and has no shell.

Type: Subagent
Repository: trailofbits/skills
GitHub stars: 7.3k
License: CC-BY-SA-4.0
Repo last updated: Sep 25, 2026
Source file: plugins/c-review/agents/c-review-worker.md

What C Review Worker is

C Review Worker is a subagent published in the trailofbits/skills repository on GitHub, which has about 7.3k stars. The repository describes itself as: “Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows”

A subagent is a specialist assistant that Claude can hand part of a task to. It is a markdown file whose frontmatter sets a name, a description that tells Claude when to delegate, and optionally the tools and model it may use; the body becomes the subagent's own system prompt.

Because a subagent works in its own context, it keeps the main conversation focused: Claude can send a narrow job, such as a review or a specialised analysis, to C Review Worker and get back a compact result.

It is set up to use these tools: Read, Grep, Glob, Write. Limiting tools is a good sign: the subagent can only do what those tools allow.

How to install C Review Worker

Claude Code

Download c-review-worker.md from the repository.
Save it to ~/.claude/agents/ to use it in every project, or to .claude/agents/ inside one project to share it through version control.
Claude Code watches these folders, so the subagent is usually available right away. Ask Claude to use it by name, or @-mention it to make sure it runs.

Claude Cowork

Cowork loads subagents through plugins. If the repository is packaged as a plugin marketplace, add it under Customize → Plugins → Add marketplace and install the plugin that contains this subagent.
Otherwise, bundle the file into your own plugin's agents/ folder and upload it from Customize → Plugins.

New to extending Cowork? Our plugins guide and Customize guide explain how skills, plugins, and connectors fit together.

Inside the source file

An excerpt from plugins/c-review/agents/c-review-worker.md, shared under the repository's CC-BY-SA-4.0 license. Read the full file on GitHub.

You review code and write one part file. Everything you need is in the prompt the workflow gives you; there is no shared ledger to query and no setup step to run.

You have no shell

Not an oversight. This task is reading, and every step of it is a Read, a Grep or a Glob. A plan that depends on running, compiling or executing anything is a plan that ends with an empty part file.

The site lines your ledger has to account for are found by reading the unit. That is the work. site_counts in your assignment file tells you how many there are, which is how you know when you have them all.

What this means in practice

Read source with Read, locate with Grep and Glob.
Write your part file with Write, to the exact path the prompt names.
Do not modify any file under the reviewed tree, and do not modify anything in the run directory except your own part file. Your Write exists for the part file. A source edit under a running review makes the coverage gate refuse to score every unit in the tree, including every other worker's.

The part file

The part file is the artifact. A deterministic assembler builds the report from the part files, not from what you return, and the workflow cross-checks the two against each other — so write every field of every finding, and if your structured answer is rejected and you send it again, rewrite the file to match the answer you actually return, last.

Follow the prompt you were given for the schema, the ledger rules and the severity table. This system prompt does not replace them.

Before you install

Read the whole file first. Skills, commands, and subagents are instructions Claude will follow, so make sure they match what you want.
Check which tools, scripts, or MCP servers it uses. Local servers and scripts run with your permissions.
Try it in a test project or a copy of your files before pointing it at real work.
Pin the version you tested, and review changes before updating.
Watch for instructions that fetch web content or run shell commands; those are where prompt injection risks start. See our prompt injection guide.

FAQ

What is C Review Worker?

C Review Worker is a subagent for Claude Code and Claude Cowork from the trailofbits/skills repository on GitHub. Runs one c-review producing task — a location slice, the class sweep, the invariant audit or the dedup pass — reading source and writing exactly one part file. Spawned by the c-review workflow only; it reads and writes, and has no shell.

How do I install C Review Worker in Claude Code?

Download c-review-worker.md from the repository. Save it to ~/.claude/agents/ to use it in every project, or to .claude/agents/ inside one project to share it through version control. Claude Code watches these folders, so the subagent is usually available right away. Ask Claude to use it by name, or @-mention it to make sure it runs.

Can I use C Review Worker in Claude Cowork?

Cowork loads subagents through plugins. If the repository is packaged as a plugin marketplace, add it under Customize → Plugins → Add marketplace and install the plugin that contains this subagent. Otherwise, bundle the file into your own plugin's agents/ folder and upload it from Customize → Plugins.

Is C Review Worker safe to install?

It is a third-party community resource, not reviewed by Anthropic or this site. Read the source file first, check which tools and connectors it uses, and install only from sources you trust.

Similar resources

Browse all skills, subagents, and plugins →

Listing data comes from the public GitHub repository and was last checked in September 2026. Excerpts are © their authors and shared under CC-BY-SA-4.0. This directory is independent and not affiliated with Anthropic or the resource's authors.