trailofbits

134 mods across 12 repositories, 13k stars between them.

c-review-worker

25

trailofbits/skills

Agent

Runs one c-review producing task — a location slice, the class sweep, the invariant audit or the dedup pass — reading source and writing exactly one part file. Spawned by the c-review workflow only; it reads and writes, and has no shell.

6.9k 4d ago A 56 tokens CC-BY-SA-4.0

c-review

26

trailofbits/skills

Skill Claude CodeCodex

Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities. Use when auditing native C/C++ applications, reviewing daemons or services for memory safety, or hunting integer overflow / use-after-free / race conditions in userspace code.

6.9k 4d ago A 61 tokens CC-BY-SA-4.0

trailofbits/skills

Skill Claude CodeCodex

Diagnose and fix Claude in Chrome MCP extension connectivity issues. Use when mcpclaude-in-chrome tools fail, return "Browser extension is not connected", or behave erratically.

6.9k 4d ago D 47 tokens CC-BY-SA-4.0

code-improver

29

trailofbits/skills

Plugin Claude Code

Improves code targets — skills, plugins, or a branch's changes — through an autonomous review-and-fix workflow with a pluggable reviewer (any installed skill or agent), a cross-round findings ledger, oscillation escalation, and a mechanical scope guard.

6.9k 4d ago A tokens not measured CC-BY-SA-4.0

fixer

30

trailofbits/skills

Agent

Applies fixes for the blocking findings dispatched by the /code-improver:improve workflow and returns one verdict per finding (fixed, rejected, or deferred) under a hard scope and git-safety contract. Dispatched by the workflow only; not for ad-hoc editing.

6.9k 4d ago A 60 tokens CC-BY-SA-4.0

code-improver

31

trailofbits/skills

Skill Claude CodeCodex

Runs an autonomous review-and-fix improvement loop over any code target — a skill, plugin, module, or directory — using a reviewer the user names: any installed skill or agent. Keeps a cross-round findings ledger, escalates when fixes stop converging, and guards scope mechanically. Use when asked to 'improve this code…

6.9k 4d ago A 116 tokens CC-BY-SA-4.0

pr-improver

32

trailofbits/skills

Skill Claude CodeCodex

Runs an autonomous review-and-fix improvement loop over the current branch's changes until a PR review comes back clean, scoped mechanically to the directories the branch touched. Reviews are performed by an installed PR-review skill (default: pr-review-toolkit's review-pr). Use to fix review findings on a branch…

6.9k 4d ago A 110 tokens CC-BY-SA-4.0

skill-improver

33

trailofbits/skills

Skill Claude CodeCodex

Runs an autonomous review-and-fix improvement loop over a Claude Code skill until a review comes back clean, with a cross-round findings ledger, escalation when fixes stop converging, and a mechanical scope guard. Reviews are performed by the plugin-dev skill-reviewer agent. Use to fix skill quality issues…

6.9k 4d ago A 115 tokens CC-BY-SA-4.0

plugin-dev

34

trailofbits/skills

Plugin Claude Code

Eval-only stand-in for the plugin-dev plugin: provides a skill-reviewer agent so cases exercising the skill-improver entry can run inside the isolated eval workspace, where the real marketplace plugin is not installed.

6.9k 4d ago A tokens not measured CC-BY-SA-4.0

skill-reviewer

35

trailofbits/skills

Agent

Reviews one Claude Code skill against Anthropic and Trail of Bits quality standards and reports every defect with a severity and a stable finding id. Dispatched by an automated improvement loop with the run's findings ledger; verifies prior fixes and honors recorded rejections. Not for general code review.

6.9k 4d ago A 60 tokens CC-BY-SA-4.0

pr-review-toolkit

36

trailofbits/skills

Plugin Claude Code

Eval-only stand-in for the pr-review-toolkit plugin: provides a review-pr skill so cases exercising the pr-improver entry can run inside the isolated eval workspace, where the real plugin is not installed.

6.9k 4d ago A tokens not measured CC-BY-SA-4.0

review-pr

37

trailofbits/skills

Skill Claude CodeCodex

Reviews the current branch's changes against its base branch as a pull request: correctness of new and modified code, test coverage for it, and documentation accuracy. Use when asked to review a branch, a diff, or a pull request.

6.9k 4d ago A 50 tokens CC-BY-SA-4.0

review-panel

38

trailofbits/skills

Plugin Claude Code

Eval-only reviewer that orchestrates specialist subagents: provides the panel-review skill plus two auditor agents, so cases can prove the improvement loop executes a reviewer skill's dispatch plan instead of flattening it into one context.

6.9k 4d ago A tokens not measured CC-BY-SA-4.0

naming-auditor

39

trailofbits/skills

Agent

Audits a code target for naming defects and internal codename leaks. Dispatched by the panel-review skill with the target path; reports findings with severities.

6.9k 4d ago A 38 tokens CC-BY-SA-4.0

todo-auditor

40

trailofbits/skills

Agent

Audits a code target for leftover work markers and release blockers. Dispatched by the panel-review skill with the target path; reports findings with severities.

6.9k 4d ago A 36 tokens CC-BY-SA-4.0

panel-review

41

trailofbits/skills

Skill Claude CodeCodex

Reviews a code target by launching a panel of specialist auditor agents and merging their reports. Use when asked to run a panel review.

6.9k 4d ago A 29 tokens CC-BY-SA-4.0

ct-check

43

trailofbits/skills

Command

Detects timing side-channels in cryptographic code.

6.9k 4d ago A 10 tokens CC-BY-SA-4.0

trailofbits/skills

Skill Claude CodeCodex

Detects timing side-channel vulnerabilities in cryptographic code. Use when implementing or reviewing crypto code, encountering division on secrets, secret-dependent branches, or constant-time programming questions in C, C++, Go, Rust, Swift, Java, Kotlin, C#, PHP, JavaScript, TypeScript, Python, or Ruby.

6.9k 4d ago A 67 tokens CC-BY-SA-4.0

culture-index

45

trailofbits/skills

Plugin Claude Code

Interprets Culture Index survey results for individuals and teams.

6.9k 4d ago A tokens not measured CC-BY-SA-4.0

trailofbits/skills

Skill Claude CodeCodex

Interprets Culture Index (CI) surveys, behavioral profiles, and personality assessment data. Supports individual profile interpretation, team composition analysis (gas/brake/glue), burnout detection, profile comparison, hiring profiles, manager coaching, interview transcript analysis for trait prediction, candidate…

6.9k 4d ago C 82 tokens CC-BY-SA-4.0

devcontainer-setup

47

trailofbits/skills

Plugin Claude Code

Create pre-configured devcontainers with Claude Code and language-specific tooling.

6.9k 4d ago A tokens not measured CC-BY-SA-4.0

devcontainer-setup

48

trailofbits/skills

Skill Claude CodeCodex

Creates devcontainers with Claude Code, language-specific tooling (Python/Node/Rust/Go), and persistent volumes. Use when adding devcontainer support to a project, setting up isolated development environments, or configuring sandboxed Claude Code workspaces.

6.9k 4d ago C 53 tokens CC-BY-SA-4.0