guipimenta/review-c
.claude/skills/review-c/SKILL.md
Review animation.c for C issues — memory safety, terminal handling, signal safety, and game logic
tools
Updated Apr 16, 2026
$ install --global
skillsauthnpx skillsauth add guipimenta/ascii_snake_c review-cInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 3:13 PM17.9s1 file scanned
SKILL.md
- name:
- review-c
- description:
- Review animation.c for C issues — memory safety, terminal handling, signal safety, and game logic
- allowed-tools:
- Read, Grep, Glob, Bash, Write
Review animation.c for the following categories of issues. Be direct and specific — cite line numbers.
Source context
Current source: !cat -n animation.c
What to check
1. Memory safety
- Buffer overflows in
write_to_buffer()— are x/y bounds checked before indexing intoscreen_buffer? malloc/freesymmetry — any allocations that might leak?- Use of uninitialized memory
2. Terminal handling
enable_raw_mode()/disable_raw_mode()— are they always paired? Can an early exit skipdisable_raw_mode()?atexitregistration — is it safe to calldisable_raw_mode()more than once?read_key()— is it truly non-blocking? What happens onread()returning -1 or 0?
3. Signal safety
- Are there signal handlers? If not, does
Ctrl+Cleave the terminal in raw mode? - Any
printf/malloccalls inside signal handlers (unsafe)?
4. Game logic
- Snake boundary conditions — what happens when the snake hits an edge?
- Frame timing — is
sleep(1)the right granularity? Any drift? - Input handling — can direction reverse instantly (e.g. going right then pressing left)?
5. General C hygiene
- Magic numbers without named constants
- Missing
returnvalues checked (e.g.write(),tcsetattr()) - Any UB (undefined behavior): signed overflow, pointer aliasing, etc.
Summarize findings by severity: Critical, Warning, Suggestion. Skip categories with nothing to report.
After completing the review, write the full output to review.md in the project root using the Write tool.
Related Skills
guipimenta/ascii-lib
development
VerifiedTrustedCommunity
Use this skill when the user asks about ascii_lib.h, wants to build a new game or animation with it, or asks how to use the screen buffer, input handling, or rendering functions in this project.
SKILL.mdUpdated Apr 16, 2026
openclaw/taskflow
tools
VerifiedTrustedCommunity
Use when work should span one or more detached tasks but still behave like one job with a single owner context. TaskFlow is the durable flow substrate under authoring layers like Lobster, ACPX, plugins, or plain code. Keep conditional logic in the caller; use TaskFlow for flow identity, child-task linkage, waiting state, revision-checked mutations, and user-facing emergence.
357,764SKILL.mdUpdated Apr 10, 2026
openclaw/extensions/lobster
tools
VerifiedTrustedCommunity
# Lobster Lobster executes multi-step workflows with approval checkpoints. Use it when: - User wants a repeatable automation (triage, monitor, sync) - Actions need human approval before executing (send, post, delete) - Multiple tool calls should run as one deterministic operation ## When to use Lobster | User intent | Use Lobster? | | ------------------------------------------------------ | --------------------------
357,764SKILL.mdUpdated Apr 10, 2026
steipete/extensions/lobster
tools
VerifiedTrustedCommunity
# Lobster Lobster executes multi-step workflows with approval checkpoints. Use it when: - User wants a repeatable automation (triage, monitor, sync) - Actions need human approval before executing (send, post, delete) - Multiple tool calls should run as one deterministic operation ## When to use Lobster | User intent | Use Lobster? | | ------------------------------------------------------ | --------------------------
357,588SKILL.mdUpdated Apr 13, 2026