Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
Plugin Claude Code
Plugin marketplace listing 42 plugins: audit-context-building, building-secure-contracts, burpsuite-project-parser, claude-in-chrome-troubleshooting, constant-time-analysis.
Plugin Claude Code
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations (Claude Code Action, Gemini CLI, OpenAI Codex, GitHub AI Inference).
Plugin Claude Code
Understand a codebase before looking for bugs in it. Reads it function by function, records what each one assumes and depends on, and saves the write-ups to files instead of filling up the conversation.
Plugin Claude Code
Comprehensive smart contract security toolkit based on Trail of Bits' Building Secure Contracts framework. Includes vulnerability scanners for 6 blockchains and 5 development guideline assistants.
Plugin Claude Code
Search and extract data from Burp Suite project files (.burp) for security analysis.
Plugin Claude Code
Comprehensive C/C++ security code review, with coverage verified against a parse of the source.
Plugin Claude Code
Diagnose and fix Claude in Chrome MCP extension connectivity issues.
Plugin Claude Code
Improves code targets — skills, plugins, or a branch's changes — through an autonomous review-and-fix workflow with a pluggable reviewer (any installed skill or agent), a cross-round findings ledger, oscillation escalation, and a mechanical scope guard.
Plugin Claude Code
Eval-only stand-in for the plugin-dev plugin: provides a skill-reviewer agent so cases exercising the skill-improver entry can run inside the isolated eval workspace, where the real marketplace plugin is not installed.
Plugin Claude Code
Eval-only stand-in for the pr-review-toolkit plugin: provides a review-pr skill so cases exercising the pr-improver entry can run inside the isolated eval workspace, where the real plugin is not installed.
Plugin Claude Code
Eval-only reviewer that orchestrates specialist subagents: provides the panel-review skill plus two auditor agents, so cases can prove the improvement loop executes a reviewer skill's dispatch plan instead of flattening it into one context.
Plugin Claude Code
Detect compiler-induced timing side-channels in cryptographic code.
Plugin Claude Code
Interprets Culture Index survey results for individuals and teams.
Plugin Claude Code
Create pre-configured devcontainers with Claude Code and language-specific tooling.
Plugin Claude Code
Security-focused differential review of code changes with git history analysis and blast radius estimation.
Plugin Claude Code
Annotates codebases with dimensional analysis comments documenting units, dimensions, and decimal scaling. Use when someone asks to annotate units in a codebase, perform a dimensional analysis, or find vulnerabilities in a DeFi protocol. Prevents dimensional mismatches and catches formula bugs early.
Plugin Claude Code
Analyze DWARF debug information: parse and search DIEs with dwarfdump and readelf, verify debug info integrity, and write DWARF parsing code.