Rustpy Review Toolkit — AI skill for Claude Code

rustpy-review-toolkit

A [Claude Code](https://docs.anthropic.com/en/docs/claude-code) plugin that statically reviews the **[RustPython](https://github.com/RustPython/RustPython) interpreter's own Rust source** for soundness and crash bugs — from the runtime-implementer's perspective.

RustPython is a Python interpreter written in Rust. This toolkit reviews *the interpreter itself*, not extensions built with it, and **not PyO3**. RustPython shares PyO3's vocabulary (`PyRef`, `PyResult`, `#[pyclass]`) but has its own object model, cycle-collecting GC, bit-packed `RefCount`, and `threading`-feature toggle — so every check is RustPython-native, not transplanted from a PyO3 toolkit.

What it finds

• Python-reachable panics (the flagship) — .unwrap() / .expect() / panic! / index / arity sites in the VM, tiered by reachability (py > protocol > internal) so a crash a Python program can trigger surfaces while internal invariants stay quiet. This is RustPython's dominant confirmed crash class.
• Unsafe soundness (the crown jewel) — cross-method pointer-cast inconsistency in the object model (the PyAtomicRef SIGSEGV shape) and handle-type transmute without a repr(transparent) / TransmuteFromObject guard.
• GC Traverse-completeness (first-class, experimental) — #[pyclass] payloads that own Python references but declare no traverse, #[pytraverse(skip)] on ref-owning fields, and manual traverse bodies that miss a field.
• Complexity and git history — reused, RustPython-calibrated.

Scanners find *candidates* (deliberately high recall); the agents confirm or dismiss each by reading the real code and judging Python-reachability.

Install

claude plugin marketplace add devdanzin/rustpy-review-toolkit
claude plugin install rustpy-review-toolkit@rustpy-review-toolkit

Commands

Command	What it does
/rustpy-review-toolkit:explore [scope] [aspects]	Full phased review: discovery → preflight orientati