Plugin Claude Code
Specification-to-code compliance checker for blockchain audits with evidence-based alignment analysis.
Plugin Claude Code
Specification-to-code compliance checker for blockchain audits with evidence-based alignment analysis.
Skill Claude CodeCodex
Verifies code implements exactly what documentation specifies for blockchain audits. Use when comparing code against whitepapers, finding gaps between specs and implementation, or performing compliance checks for protocol implementations.
Plugin Claude Code
Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection.
Skill Claude CodeCodex
Run CodeQL static analysis for security vulnerability detection, taint tracking, and data flow analysis. Use when asked to analyze code with CodeQL, create CodeQL databases, write custom QL queries, perform security audits, or set up CodeQL in CI/CD pipelines.
Skill Claude CodeCodex
Parse, analyze, and process SARIF (Static Analysis Results Interchange Format) files. Use when reading security scan results, aggregating findings from multiple tools, deduplicating alerts, extracting specific vulnerabilities, or integrating SARIF data into CI/CD pipelines.
Skill Claude CodeCodex
Run Semgrep static analysis for fast security scanning and pattern matching. Use when asked to scan code with Semgrep, write custom YAML rules, find vulnerabilities quickly, use taint mode, or set up Semgrep in CI/CD pipelines.
Plugin Claude Code
Skills from the Trail of Bits Application Security Testing Handbook (appsec.guide).
Skill Claude CodeCodex
AddressSanitizer detects memory errors during fuzzing. Use when fuzzing C/C++ code to find buffer overflows and use-after-free bugs.
Skill Claude CodeCodex
AFL++ is a fork of AFL with better fuzzing performance and advanced features. Use for multi-core fuzzing of C/C++ projects.
Skill Claude CodeCodex
Atheris is a coverage-guided Python fuzzer based on libFuzzer. Use for fuzzing pure Python code and Python C extensions.
Skill Claude CodeCodex
Skill "cargo-fuzz" from Fodhol/skills, covering cargo-fuzz, when to use, quick start, edit fuzz/fuzztargets/fuzztarget1.rs with your harness and installation.
Skill Claude CodeCodex
Constant-time testing detects timing side channels in cryptographic code. Use when auditing crypto implementations for timing vulnerabilities.