Plugin Claude Code
Plugin marketplace listing 20 plugins: ask-questions-if-underspecified, audit-context-building, building-secure-contracts, burpsuite-project-parser, constant-time-analysis.
Instructions file
Claude Code instructions for Fodhol/skills, covering contributing skills, resources, technical reference, plugin structure and frontmatter.
Plugin Claude Code
Clarify requirements before implementing. Do not use automatically, only when invoked explicitly.
Skill Claude CodeCodex
Clarify requirements before implementing. Use when serious doubts araise.
Plugin Claude Code
Build deep architectural context through ultra-granular code analysis before vulnerability hunting.
Skill Claude CodeCodex
Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding.
Plugin Claude Code
Comprehensive smart contract security toolkit based on Trail of Bits' Building Secure Contracts framework. Includes vulnerability scanners for 6 blockchains and 5 development guideline assistants.
Skill Claude CodeCodex
Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access control issues. Use when auditing Algorand projects (TEAL/PyTeal). (project, gitignored).
Skill Claude CodeCodex
Prepare your codebase for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tools, increases test coverage, removes dead code, ensures accessibility, and generates comprehensive documentation (flowcharts, user stories, inline comments). (project, gitignored).
Skill Claude CodeCodex
Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address conversion problems, and signature replay. Use when auditing StarkNet projects. (project, gitignored).
Skill Claude CodeCodex
Systematic code maturity assessment using Trail of Bits' 9-category framework. Analyzes codebase for arithmetic safety, auditing practices, access controls, complexity, decentralization, documentation, MEV risks, low-level code, and testing. Produces professional scorecard with evidence-based ratings and actionable…
Skill Claude CodeCodex
Scans Cosmos SDK blockchains for 9 consensus-critical vulnerabilities including non-determinism, incorrect signers, ABCI panics, and rounding errors. Use when auditing Cosmos chains or CosmWasm contracts. (project, gitignored).
Skill Claude CodeCodex
Comprehensive smart contract development advisor based on Trail of Bits' best practices. Analyzes codebase to generate documentation/specifications, review architecture, check upgradeability patterns, assess implementation quality, identify pitfalls, review dependencies, and evaluate testing. Provides actionable…
Skill Claude CodeCodex
Guide you through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeability/ERC conformance/token integration), generates visual security diagrams, helps document security properties for fuzzing/verification, and reviews manual security areas. (project, gitignored).
Skill Claude CodeCodex
Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ownership checks, and sysvar spoofing. Use when auditing Solana/Anchor programs. (project, gitignored).
Skill Claude CodeCodex
Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin checks. Use when auditing Substrate runtimes or FRAME pallets. (project, gitignored).
Skill Claude CodeCodex
Comprehensive token integration and implementation analyzer based on Trail of Bits' token integration checklist. Analyzes token implementations for ERC20/ERC721 conformity, checks for 20+ weird token patterns, assesses contract composition and owner privileges, performs on-chain scarcity analysis, and evaluates how…
Skill Claude CodeCodex
Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Jetton contracts, and forward TON without gas checks. Use when auditing FunC contracts. (project, gitignored).
Plugin Claude Code
Search and extract data from Burp Suite project files (.burp) directly from the command line for use in Claude.
Skill Claude CodeCodex
Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bodies with regex patterns, extracting security audit findings, dumping proxy history or site map data, or analyzing HTTP traffic captured in a Burp project.
Plugin Claude Code
Diagnose and fix Claude in Chrome MCP extension connectivity issues.
Skill Claude CodeCodex
Diagnose and fix Claude in Chrome MCP extension connectivity issues. Use when mcpclaude-in-chrome tools fail, return "Browser extension is not connected", or behave erratically.
Plugin Claude Code
Detect compiler-induced timing side-channels in cryptographic code.
Skill Claude CodeCodex
Detects timing side-channel vulnerabilities in cryptographic code. Use when implementing or reviewing crypto code, encountering division on secrets, secret-dependent branches, or constant-time programming questions in C, C++, Go, Rust, Swift, Java, Kotlin, C#, PHP, JavaScript, TypeScript, Python, or Ruby.