trailofbits

trailofbits/skills

Plugin Claude Code

Bundles 1 skill · 82 tokens together

Prepares a repository for public open-source release: secrets-history hygiene, license selection, documentation and CI readiness checks, and language-specific packaging and release guidance.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill · 183 tokens together

Write, review, and triage property-based tests — Hypothesis, fast-check, proptest, and Echidna or Medusa for Solidity invariants.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill, 3 agents · 228 tokens together

Comprehensive Rust security code review with specialized bug-finding agents covering the safe/unsafe boundary, memory safety in unsafe blocks, concurrency, panic-induced DoS, recursion-induced stack overflow, FFI, and async runtime hazards.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill · 65 tokens together

Gets independent code reviews from Codex or Antigravity for uncommitted changes, branch diffs, and commits.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill, 1 command · 45 tokens together

Create custom Semgrep rules for detecting bug patterns and security vulnerabilities.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill · 50 tokens together

Creates language variants of existing Semgrep rules with proper applicability analysis and test-driven validation.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill, 1 agent · 118 tokens together

Identify error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill, 1 agent · 113 tokens together

Check code against the documentation that specifies it: one agent per requirement, divergences refuted before they are reported, evidence cited to the line.

trailofbits/skills

Plugin Claude Code

Bundles 3 skills · 418 tokens together

Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill · 74 tokens together

Audit a project's npm, PyPI, and Go dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree, abandoned upstreams, npm publisher concentration, and install scripts.

trailofbits/skills

Plugin Claude Code

Bundles 15 skills · 1,346 tokens together

Skills from the Trail of Bits Application Security Testing Handbook (appsec.guide).

trailofbits/skills

Plugin Claude Code

Bundles 14 skills, 1 agent · 1,409 tokens together

Builds source and binary code graphs for security analysis, context slicing, mutation testing, cryptographic protocol modeling, finding triage, and variant analysis.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill · 121 tokens together

Find similar vulnerabilities and bugs across codebases using pattern-based analysis.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill · 127 tokens together

Principled framework for triaging vulnerability reports using 7 brocards (rules of thumb). Evaluates incoming CVEs, bug bounty submissions, and security findings against structured dismissal/acceptance criteria before escalating to deeper analysis.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill · 111 tokens together

Structured Lean 4 proof writing and library design following Mathlib conventions.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill · 83 tokens together

YARA-X detection rule authoring with linting and quality analysis.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill, 11 agents, 1 MCP server · 631 tokens together

Detects missing or compiler-optimized zeroization of sensitive data with assembly and control-flow analysis.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill · 86 tokens together

Validates security patches against the reported bug, root-cause variants, and surrounding behavior. Returns reproducible failures to repair and validation gaps, with pinned inputs and saved evidence. Bundles a validate-patch dynamic workflow for Claude Code.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill · 22 tokens together

Generates an interactive HTML walkthrough for reviewing code changes. Use only when explicitly called.

trailofbits/skills

Plugin Claude Code

Bundles 1 skill · 47 tokens together

Diagnose and fix Claude in Chrome MCP extension connectivity issues.

trailofbits/claude-code-config

Command Claude Code

@description End-to-end: plan, implement, test, review, fix, push, and PR for a GitHub issue. @arguments $ISSUENUMBER: GitHub issue number to fix.

trailofbits/claude-code-config

Command Claude Code

@description Evaluate and merge dependabot PRs with parallel builds, dependency-aware batching, and transitive dep analysis. @arguments $REPO: GitHub org/repo (e.g., trailofbits/algo). $OPTIONS: Optional flags — "--skip-config-audit" skips Phase 0 (use in batch runs where config audit is a separate pass).

trailofbits/claude-code-config

Command Claude Code

@description Review an existing PR with parallel agents, fix findings, and push. @arguments $PRNUMBER: GitHub PR number to review and fix.

trailofbits/skills-curated

Command Claude Code

Import a skill from a GitHub URL into the curated marketplace. Downloads, transforms to meet plugin standards, validates, and creates a PR.