trailofbits

trailofbits/skills

Plugin Claude Code

Security-focused differential review of code changes with git history analysis and blast radius estimation.

trailofbits/skills

Agent

Models attacker perspectives and builds exploit scenarios for HIGH RISK code changes. Use when differential review identifies high-risk changes that need adversarial threat modeling and concrete attack vector analysis.

trailofbits/skills

Command

Performs security-focused differential review of code changes.

trailofbits/skills

Skill Claude CodeCodex

Performs security-focused differential review of code changes. Adapts analysis depth to codebase size, uses git blame for context, calculates blast radius by counting callers, checks test coverage of modified code, and generates a markdown report. Use when reviewing a PR, commit, or diff for security vulnerabilities…

trailofbits/skills

Plugin Claude Code

Annotates codebases with dimensional analysis comments documenting units, dimensions, and decimal scaling. Use when someone asks to annotate units in a codebase, perform a dimensional analysis, or find vulnerabilities in a DeFi protocol. Prevents dimensional mismatches and catches formula bugs early.

trailofbits/skills

Agent

Scans repo for files with dimensional arithmetic to scope discovery.

trailofbits/skills

Agent

Adds dimensional annotations to source code at anchor points using Reserve Protocol's format.

trailofbits/skills

Agent

Discovers dimensional vocabulary for codebases by analyzing naming conventions and protocol patterns.

trailofbits/skills

Agent

Propagates dimensional annotations through arithmetic and call chains, reporting mismatches found during propagation.

trailofbits/skills

Agent

Validates dimensional consistency and detects dimensional bugs in annotated code.

trailofbits/skills

Skill Claude CodeCodex

Annotates codebases with dimensional analysis comments documenting units, dimensions, and decimal scaling. Use when someone asks to annotate units in a codebase, perform a dimensional analysis, or find vulnerabilities in a DeFi protocol, offchain code, or other blockchain-related codebase with arithmetic. Prevents…

trailofbits/skills

Plugin Claude Code

Analyze DWARF debug information: parse and search DIEs with dwarfdump and readelf, verify debug info integrity, and write DWARF parsing code.

trailofbits/claude-code-config

Command Claude Code

You are installing or updating Trail of Bits' Claude Code configuration into the user's /.claude/ directory.

trailofbits/claude-code-config

Command

@description End-to-end: plan, implement, test, review, fix, push, and PR for a GitHub issue. @arguments $ISSUENUMBER: GitHub issue number to fix.

trailofbits/claude-code-config

Command

@description Evaluate and merge dependabot PRs with parallel builds, dependency-aware batching, and transitive dep analysis. @arguments $REPO: GitHub org/repo (e.g., trailofbits/algo). $OPTIONS: Optional flags — "--skip-config-audit" skips Phase 0 (use in batch runs where config audit is a separate pass).

trailofbits/claude-code-config

Command

@description Review an existing PR with parallel agents, fix findings, and push. @arguments $PRNUMBER: GitHub PR number to review and fix.

trailofbits/publications

Instructions file

Claude Code instructions for trailofbits/publications, covering guide for claude when working with this repository, repository guidelines, creating prs, date formatting and section organization.

trailofbits/claude-code-devcontainer

Settings file Claude Code

Agent settings configuring permissions.

trailofbits/skills-curated

Plugin Claude Code

Plugin marketplace listing 29 plugins: humanizer, skill-extractor, planning-with-files, ffuf-web-fuzzing, wooyun-legacy.

trailofbits/skills-curated

Command Claude Code

Import a skill from a GitHub URL into the curated marketplace. Downloads, transforms to meet plugin standards, validates, and creates a PR.

trailofbits/skills-curated

Command Claude Code

Reviews a plugin for quality, correctness, and CLAUDE.md conformance. Fixes all issues found. Use after importing or modifying a plugin.

trailofbits/skills-curated

Instructions file

Claude Code instructions for trailofbits/skills-curated, covering contributing skills, resources, technical reference, plugin structure and frontmatter.

trailofbits/skills-curated

Plugin Claude Code

Expert guidance for ffuf web fuzzing during authorized penetration testing, including authenticated fuzzing, auto-calibration, and result analysis.

trailofbits/skills-curated

Skill Claude CodeCodex

Expert guidance for ffuf web fuzzing during authorized penetration testing. Covers directory discovery, subdomain enumeration, parameter fuzzing, authenticated fuzzing with raw requests, auto-calibration, and result analysis. Use when running ffuf scans, analyzing ffuf output, or building fuzzing strategies for web…