trailofbits

162 mods in 73 plugins, 9 repositories, 14k stars between them.

review-plugin

49

trailofbits/skills-curated

Command Claude Code

Reviews a plugin for quality, correctness, and CLAUDE.md conformance. Fixes all issues found. Use after importing or modifying a plugin.

not rated 515 +2 3mo ago A 33 tokens CC-BY-SA-4.0

ffuf-web-fuzzing

50

trailofbits/skills-curated

Plugin Claude Code

Bundles 1 skill · 68 tokens together

Expert guidance for ffuf web fuzzing during authorized penetration testing, including authenticated fuzzing, auto-calibration, and result analysis.

not rated 515 +2 3mo ago A tokens not measured CC-BY-SA-4.0

ghidra-headless

51

trailofbits/skills-curated

Plugin Claude Code

Bundles 1 skill · 47 tokens together

Reverse engineer binaries using Ghidra's headless analyzer. Decompile executables, extract functions, strings, symbols, and analyze call graphs without GUI.

not rated 515 +2 3mo ago A tokens not measured CC-BY-SA-4.0

humanizer

52

trailofbits/skills-curated

Plugin Claude Code

Bundles 1 skill · 113 tokens together

Remove signs of AI-generated writing from text to make it sound natural and human-written.

not rated 515 +2 3mo ago A tokens not measured CC-BY-SA-4.0

last30days

53

trailofbits/skills-curated

Plugin Claude Code

Bundles 1 skill · 56 tokens together

Researches any topic from the last 30 days across Reddit, X, and the web, surfacing real community discussions with engagement metrics.

not rated 515 +2 3mo ago A tokens not measured CC-BY-SA-4.0

trailofbits/skills-curated

Plugin Claude Code

Bundles 1 skill · 54 tokens together

Deploy applications and infrastructure to Cloudflare using Workers, Pages, and related platform services. Use when the user asks to deploy, host, publish, or set up a project on Cloudflare. Originally from OpenAI's curated skills catalog.

not rated 515 +2 3mo ago A tokens not measured CC-BY-SA-4.0

trailofbits/skills-curated

Plugin Claude Code

Bundles 1 skill · 76 tokens together

Use when the agent is building or iterating on a web game (HTML/JS) and needs a reliable development + testing loop: implement small changes, run a Playwright-based test script with short input bursts and intentional pauses, inspect screenshots/text, and review console errors with rendergametotext. Originally from O.

not rated 515 +2 3mo ago A tokens not measured CC-BY-SA-4.0

openai-doc

56

trailofbits/skills-curated

Plugin Claude Code

Bundles 1 skill · 58 tokens together

Use when the task involves reading, creating, or editing .docx documents, especially when formatting or layout fidelity matters; prefer python-docx plus the bundled scripts/renderdocx.py for visual checks. Originally from OpenAI's curated skills catalog.

not rated 515 +2 3mo ago A tokens not measured CC-BY-SA-4.0

trailofbits/skills-curated

Plugin Claude Code

Bundles 1 skill · 50 tokens together

Help address review/issue comments on the open GitHub PR for the current branch using gh CLI; verify gh auth first and prompt the user to authenticate if not logged in. Originally from OpenAI's curated skills catalog.

not rated 515 +2 3mo ago A tokens not measured CC-BY-SA-4.0

openai-gh-fix-ci

58

trailofbits/skills-curated

Plugin Claude Code

Bundles 1 skill · 83 tokens together

Use when a user asks to debug or fix failing GitHub PR checks that run in GitHub Actions; use gh to inspect checks and logs, summarize failure context, draft a fix plan, and implement only after explicit approval. Treat external providers (for example Buildkite) as out of scope and report only the details URL. Origin.

not rated 515 +2 3mo ago A tokens not measured CC-BY-SA-4.0

trailofbits/skills-curated

Plugin Claude Code

Bundles 1 skill · 68 tokens together

Use when the user asks to create, scaffold, or edit Jupyter notebooks (.ipynb) for experiments, explorations, or tutorials; prefer the bundled templates and run the helper script newnotebook.py to generate a clean starting notebook. Originally from OpenAI's curated skills catalog.

not rated 515 +2 3mo ago A tokens not measured CC-BY-SA-4.0

trailofbits/skills-curated

Plugin Claude Code

Bundles 1 skill · 62 tokens together

Deploy web projects to Netlify using the Netlify CLI (npx netlify). Use when the user asks to deploy, host, publish, or link a site/repo on Netlify, including preview and production deploys. Originally from OpenAI's curated skills catalog.

not rated 515 +2 3mo ago A tokens not measured CC-BY-SA-4.0

openai-pdf

61

trailofbits/skills-curated

Plugin Claude Code

Bundles 1 skill · 68 tokens together

Use when tasks involve reading, creating, or reviewing PDF files where rendering and layout matter; prefer visual checks by rendering pages (Poppler) and use Python tools such as reportlab, pdfplumber, and pypdf for generation and extraction. Originally from OpenAI's curated skills catalog.

not rated 515 +2 3mo ago A tokens not measured CC-BY-SA-4.0

openai-playwright

62

trailofbits/skills-curated

Plugin Claude Code

Bundles 1 skill · 56 tokens together

Use when the task requires automating a real browser from the terminal (navigation, form filling, snapshots, screenshots, data extraction, UI-flow debugging) via playwright-cli or the bundled wrapper script. Originally from OpenAI's curated skills catalog.

not rated 515 +2 3mo ago A tokens not measured CC-BY-SA-4.0

openai-screenshot

63

trailofbits/skills-curated

Plugin Claude Code

Bundles 1 skill · 56 tokens together

Use when the user explicitly asks for a desktop or system screenshot (full screen, specific app or window, or a pixel region), or when tool-specific capture capabilities are unavailable and an OS-level capture is needed. Originally from OpenAI's curated skills catalog.

not rated 515 +2 3mo ago A tokens not measured CC-BY-SA-4.0

trailofbits/skills-curated

Plugin Claude Code

Bundles 1 skill · 84 tokens together

Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not…

not rated 515 +2 3mo ago A tokens not measured CC-BY-SA-4.0

trailofbits/skills-curated

Plugin Claude Code

Bundles 1 skill · 110 tokens together

Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization. Trigger only when the user explicitly wants a security-oriented ownership or bus-factor analysis grounded in git history (for…

not rated 515 +2 3mo ago A tokens not measured CC-BY-SA-4.0

trailofbits/skills-curated

Plugin Claude Code

Bundles 1 skill · 93 tokens together

Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling.

not rated 515 +2 3mo ago A tokens not measured CC-BY-SA-4.0

openai-sentry

67

trailofbits/skills-curated

Plugin Claude Code

Bundles 1 skill · 61 tokens together

Use when the user asks to inspect Sentry issues or events, summarize recent production errors, or pull basic Sentry health data via the Sentry API; perform read-only queries with the bundled script and require SENTRYAUTHTOKEN. Originally from OpenAI's curated skills catalog.

not rated 515 +2 3mo ago A tokens not measured CC-BY-SA-4.0

openai-spreadsheet

68

trailofbits/skills-curated

Plugin Claude Code

Bundles 1 skill · 66 tokens together

Use when tasks involve creating, editing, analyzing, or formatting spreadsheets (.xlsx, .csv, .tsv) using Python (openpyxl, pandas), especially when formulas, references, and formatting need to be preserved and verified. Originally from OpenAI's curated skills catalog.

not rated 515 +2 3mo ago A tokens not measured CC-BY-SA-4.0

openai-yeet

69

trailofbits/skills-curated

Plugin Claude Code

Bundles 1 skill · 47 tokens together

Use only when the user explicitly asks to stage, commit, push, and open a GitHub pull request in one flow using the GitHub CLI (gh). Originally from OpenAI's curated skills catalog.

not rated 515 +2 3mo ago A tokens not measured CC-BY-SA-4.0

productivity

71

trailofbits/skills-curated

Plugin Claude Code

Bundles 4 skills · 165 tokens together

General workflow skills: relentless plan-grilling interviews, conversation handoff documents, multi-session teaching workspaces, and a reference for writing predictable agent skills.

not rated 515 +2 3mo ago A tokens not measured CC-BY-SA-4.0

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: