🚀 Enhance your AI-assisted security workflows with plugins from the Trail of Bits Skills Marketplace for smarter analysis and testing.
Plugin Claude Code
Plugin marketplace listing 20 plugins: ask-questions-if-underspecified, audit-context-building, building-secure-contracts, burpsuite-project-parser, constant-time-analysis.
Plugin Claude Code
Clarify requirements before implementing. Do not use automatically, only when invoked explicitly.
Plugin Claude Code
Build deep architectural context through ultra-granular code analysis before vulnerability hunting.
Plugin Claude Code
Comprehensive smart contract security toolkit based on Trail of Bits' Building Secure Contracts framework. Includes vulnerability scanners for 6 blockchains and 5 development guideline assistants.
Plugin Claude Code
Search and extract data from Burp Suite project files (.burp) directly from the command line for use in Claude.
Plugin Claude Code
Diagnose and fix Claude in Chrome MCP extension connectivity issues.
Plugin Claude Code
Detect compiler-induced timing side-channels in cryptographic code.
Plugin Claude Code
Interprets Culture Index survey results for individuals and teams.
Plugin Claude Code
Security-focused differential review of code changes with git history analysis and blast radius estimation.
Plugin Claude Code
Interact with and understand the DWARF debugging format.
Plugin Claude Code
Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify state, categorizes them by access level, and generates structured audit reports.
Plugin Claude Code
Scan Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions. For authorized security research only.
Plugin Claude Code
Verifies that code changes address security audit findings without introducing bugs.
Plugin Claude Code
Modern Python best practices. Use when creating new Python projects, and writing Python scripts, or migrating existing projects from legacy tools.
Plugin Claude Code
Property-based testing guidance for multiple languages and smart contracts.
Plugin Claude Code
Create custom Semgrep rules for detecting bug patterns and security vulnerabilities.
Plugin Claude Code
Creates language variants of existing Semgrep rules with proper applicability analysis and test-driven validation.
Plugin Claude Code
Identify error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes.
Plugin Claude Code
Specification-to-code compliance checker for blockchain audits with evidence-based alignment analysis.
Plugin Claude Code
Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection.
Plugin Claude Code
Skills from the Trail of Bits Application Security Testing Handbook (appsec.guide).