trailofbits

trailofbits/skills

Plugin Claude Code

Bundles 1 skill · 105 tokens together

Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations (Claude Code Action, Gemini CLI, OpenAI Codex, GitHub AI Inference).

trailofbits/skills

Plugin Claude Code

Bundles 1 skill, 1 agent · 110 tokens together

Understand a codebase before looking for bugs in it. Reads it function by function, records what each one assumes and depends on, and saves the write-ups to files instead of filling up the conversation.

trailofbits/skills

Plugin Claude Code

Bundles 11 skills · 861 tokens together

Comprehensive smart contract security toolkit based on Trail of Bits' Building Secure Contracts framework. Includes vulnerability scanners for 6 blockchains and 5 development guideline assistants.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill, 1 command · 69 tokens together

Search and extract data from Burp Suite project files (.burp) for security analysis.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill, 1 agent · 117 tokens together

Comprehensive C/C++ security code review, with coverage verified against a parse of the source.

trailofbits/skills

Plugin Claude Code

Bundles 3 skills, 1 agent · 401 tokens together

Improves code targets — skills, plugins, or a branch's changes — through an autonomous review-and-fix workflow with a pluggable reviewer (any installed skill or agent), a cross-round findings ledger, oscillation escalation, and a mechanical scope guard.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill, 1 command · 77 tokens together

Detect compiler-induced timing side-channels in cryptographic code.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill · 128 tokens together

Interprets Culture Index survey results for individuals and teams.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill · 53 tokens together

Create pre-configured devcontainers with Claude Code and language-specific tooling.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill, 1 command, 1 agent · 146 tokens together

Security-focused differential review of code changes with git history analysis and blast radius estimation.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill, 5 agents · 194 tokens together

Audits code for unit and decimal-scaling bugs and annotates it with dimensional comments recording the units of each value. Use when someone asks to audit or review code for unit confusion, decimals or scaling mismatches, WAD/RAY scale errors, or the wrong token's decimals; to annotate units in a codebase; or to…

trailofbits/skills

Plugin Claude Code

Bundles 1 skill · 88 tokens together

Analyze DWARF debug information: parse and search DIEs with dwarfdump and readelf, verify debug info integrity, and write DWARF parsing code.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill, 1 command · 119 tokens together

Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify state, categorizes them by access level, and generates structured audit reports.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill, 1 command · 70 tokens together

Scan Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions. For authorized security research only.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill, 3 agents · 192 tokens together

Systematic false positive verification for security bug analysis with mandatory gate reviews.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill · 40 tokens together

Intercepts GitHub URL fetches (WebFetch and MCP fetch tools) and curl/wget commands, redirecting to the authenticated gh CLI.

trailofbits/skills

Plugin Claude Code

Bundles 1 command · 33 tokens together

Safely analyzes and cleans up local git branches and worktrees by categorizing them as merged, squash-merged, superseded, or active work.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill · 112 tokens together

Triages a repository's open GitHub issues and pull requests via the gh CLI: optionally merges ready bot and maintainer-approved PRs and spawns review subagents for unreviewed ones, closes already-resolved issues with referenced explanations, cross-links issues with pending fix PRs, and assigns local-only priority and…

trailofbits/skills

Plugin Claude Code

Bundles 1 skill · 67 tokens together

Drafts copy-ready /goal commands for goal mode in Claude Code and Codex: verifiable completion conditions with stop bounds, normalized to a single line under the 4,000-character cap.

trailofbits/skills

Plugin Claude Code

Bundles 1 command · 59 tokens together

Detects insecure default configurations including hardcoded credentials, fallback secrets, weak authentication defaults, and dangerous values in production.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill, 1 agent · 169 tokens together

Draws the 12 Houses of the Zodiac Tarot spread using cryptographic randomness to add 100+ bits of entropy to vague or underspecified planning. Interprets the spread to guide next steps. Use when feeling lucky, invoking heart-of-the-cards energy, or when prompts are ambiguous.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill · 69 tokens together

Modern C++ best practices (C++20/23/26). Use when writing C++ code, creating new C++ projects, or modernizing legacy C++ patterns.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill · 39 tokens together

Modern Python best practices. Use when creating new Python projects, and writing Python scripts, or migrating existing projects from legacy tools.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill · 46 tokens together

Configures mewt or muton campaigns, analyzes surviving mutants, and investigates bugs exposed by testing gaps. Use when setting up mutation testing, reviewing campaign results, identifying equivalent mutants, or finding bugs from surviving mutations.