unsafe-checker SKILL.md skillA

unsafe-checker from moeru-ai/auv is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add moeru-ai/auv/unsafe-checker@git:20260725.8a8e541

Pins git:20260725.8a8e541 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
moeru-ai/auv
Path
.agents/skills/unsafe-checker/SKILL.md
Versions recorded
1
Latest version
git:20260725.8a8e541, committed Jul 25, 2026
Size
2,490 bytes
Repository stars
207
License
Apache-2.0

CRITICAL: Use for unsafe Rust code review and FFI. Triggers on: unsafe, raw pointer, FFI, extern, transmute, *mut, *const, union, #[repr(C)], libc, std::ffi, MaybeUninit, NonNull, SAFETY comment, soundness, undefined behavior, UB, safe wrapper, memory layout, bindgen, cbindgen, CString, CStr, 安全抽象, 裸指针, 外部函数接口, 内存布局, 不安全代码, FFI 绑定, 未定义行为.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

Display the following ASCII art exactly as shown. Do not modify spaces or line breaks:
```text
⚠️ **Unsafe Rust Checker Loaded**

     *  ^  *
    /◉\_~^~_/◉\
 ⚡/     o     \⚡
   '_        _'
   / '-----' \
```

---

# Unsafe Rust Checker

## When Unsafe is Valid

| Use Case | Example |
|----------|---------|
| FFI | Calling C functions |
| Low-level abstractions | Implementing `Vec`, `Arc` |
| Performance | Measured bottleneck with safe alternative too slow |

**NOT valid:** Escaping borrow checker without understanding why.

## Required Documentation

```rust
// SAFETY: <why this is safe>
unsafe { ... }

/// # Safety
/// <caller requirements>
pub unsafe fn dangerous() { ... }
```

## Quick Reference

| Operation | Safety Requirements |
|-----------|---------------------|
| `*ptr` deref | Valid, aligned, initialized |
| `&*ptr` | + No aliasing violations |
| `transmute` | Same size, valid bit pattern |
| `extern "C"` | Correct signature, ABI |
| `static mut` | Synchronization guaranteed |
| `impl Send/Sync` | Actually thread-safe |

## Common Errors

| Error | Fix |
|-------|-----|
| Null pointer deref | Check for null before deref |
| Use after free | Ensure lifetime validity |
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add moeru-ai/auv/unsafe-checker@sha256:61dc44bbbe4df933

The line at the top of this page pins the label git:20260725.8a8e541, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_sme7sz57w7vdn6xg.svg)](https://markdownregistry.com/a/art_sme7sz57w7vdn6xg)

4 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Jul 25, 2026.

versioncommittedcommitsizeaudit
git:20260725.8a8e541 latest2026-07-25 8a8e541 2,490 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (2490 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

moeru-ai/auv · 207 stars · license Apache-2.0 · pushed 2026-11-07 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_sme7sz57w7vdn6xg
GET https://markdownregistry.com/api/v1/resolve?ref=moeru-ai/auv/unsafe-checker
GET https://markdownregistry.com/api/v1/blob/61dc44bbbe4df93391119d1a4daeb4b331eb5711821a5db7ab7e16bd0f4e048b

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from moeru-ai/auv

ast-grep SKILL.md skill
moeru-ai/auv · .agents/skills/ast-grep/SKILL.md · Guide for writing ast-grep rules to perform structural code search and analysis. Use when users need to search…
git:20260725.0b88df9 · audit A · 207 stars
auv-wayland-rendering SKILL.md skill
moeru-ai/auv · .agents/skills/auv-wayland-rendering/SKILL.md · Prepare, diagnose, and validate Linux GPU and Wayland environments for AUV rendering and capture through XDG Desktop…
git:20260903.99a9e69 · audit A · 207 stars
create-pr SKILL.md skill
moeru-ai/auv · .agents/skills/create-pr/SKILL.md · Prepare or update AUV pull requests with source-backed CLI, Protobuf/Runner, and public API change disclosures…
git:20261004.a5ef613 · audit A · 207 stars
domain-cli SKILL.md skill
moeru-ai/auv · .agents/skills/domain-cli/SKILL.md · Use when building CLI tools. Keywords: CLI, command line, terminal, clap, structopt, argument parsing, subcommand…
git:20260725.8a8e541 · audit A · 207 stars
domain-cloud-native SKILL.md skill
moeru-ai/auv · .agents/skills/domain-cloud-native/SKILL.md · Use when building cloud-native apps. Keywords: kubernetes, k8s, docker, container, grpc, tonic, microservice, service…
git:20260725.8a8e541 · audit A · 207 stars
domain-ml SKILL.md skill
moeru-ai/auv · .agents/skills/domain-ml/SKILL.md · Use when building ML/AI apps in Rust. Keywords: machine learning, ML, AI, tensor, model, inference, neural network…
git:20260725.8a8e541 · audit A · 207 stars
domain-web SKILL.md skill
moeru-ai/auv · .agents/skills/domain-web/SKILL.md · Use when building web services. Keywords: web server, HTTP, REST API, GraphQL, WebSocket, axum, actix, warp, rocket…
git:20260725.8a8e541 · audit A · 207 stars
m01-ownership SKILL.md skill
moeru-ai/auv · .agents/skills/m01-ownership/SKILL.md · CRITICAL: Use for ownership/borrow/lifetime issues. Triggers: E0382, E0597, E0506, E0507, E0515, E0716, E0106, value…
git:20260725.8a8e541 · audit A · 207 stars
m02-resource SKILL.md skill
moeru-ai/auv · .agents/skills/m02-resource/SKILL.md · CRITICAL: Use for smart pointers and resource management. Triggers: Box, Rc, Arc, Weak, RefCell, Cell, smart pointer…
git:20260725.8a8e541 · audit A · 207 stars
m03-mutability SKILL.md skill
moeru-ai/auv · .agents/skills/m03-mutability/SKILL.md · CRITICAL: Use for mutability issues. Triggers: E0596, E0499, E0502, cannot borrow as mutable, already borrowed as…
git:20260725.8a8e541 · audit A · 207 stars
m04-zero-cost SKILL.md skill
moeru-ai/auv · .agents/skills/m04-zero-cost/SKILL.md · CRITICAL: Use for generics, traits, zero-cost abstraction. Triggers: E0277, E0308, E0599, generic, trait, impl, dyn…
git:20260725.8a8e541 · audit A · 207 stars
m05-type-driven SKILL.md skill
moeru-ai/auv · .agents/skills/m05-type-driven/SKILL.md · CRITICAL: Use for type-driven design. Triggers: type state, PhantomData, newtype, marker trait, builder pattern, make…
git:20260725.8a8e541 · audit A · 207 stars

Every file in moeru-ai/auv

Browse by kind, by grade A, or by owner.