Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
Trail of Bits Skills Marketplace is a collection of Claude Code plugins, skills, agents, commands, and instructions for security analysis, vulnerability detection, code auditing, and development workflows. It is for developers and security researchers using AI-assisted tools to inspect software, smart contracts, CI workflows, and related artifacts. The catalogue entries are examples of the marketplace’s reusable agent extensions.
This repository also configures its own agents. See what skills tells them →
Plugin Claude Code
Bundles 1 skill · 82 tokens together
Prepares a repository for public open-source release: secrets-history hygiene, license selection, documentation and CI readiness checks, and language-specific packaging and release guidance.
Plugin Claude Code
Bundles 1 skill · 183 tokens together
Write, review, and triage property-based tests — Hypothesis, fast-check, proptest, and Echidna or Medusa for Solidity invariants.
Plugin Claude Code
Bundles 1 skill, 3 agents · 228 tokens together
Comprehensive Rust security code review with specialized bug-finding agents covering the safe/unsafe boundary, memory safety in unsafe blocks, concurrency, panic-induced DoS, recursion-induced stack overflow, FFI, and async runtime hazards.
Plugin Claude Code
Bundles 1 skill · 65 tokens together
Gets independent code reviews from Codex or Antigravity for uncommitted changes, branch diffs, and commits.
Plugin Claude Code
Bundles 1 skill, 1 command · 45 tokens together
Create custom Semgrep rules for detecting bug patterns and security vulnerabilities.
Plugin Claude Code
Bundles 1 skill · 50 tokens together
Creates language variants of existing Semgrep rules with proper applicability analysis and test-driven validation.
Plugin Claude Code
Bundles 1 skill, 1 agent · 118 tokens together
Identify error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes.
Plugin Claude Code
Bundles 1 skill, 1 agent · 113 tokens together
Check code against the documentation that specifies it: one agent per requirement, divergences refuted before they are reported, evidence cited to the line.
Plugin Claude Code
Bundles 3 skills · 418 tokens together
Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection.
Plugin Claude Code
Bundles 1 skill · 74 tokens together
Audit a project's npm, PyPI, and Go dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree, abandoned upstreams, npm publisher concentration, and install scripts.
Plugin Claude Code
Bundles 15 skills · 1,346 tokens together
Skills from the Trail of Bits Application Security Testing Handbook (appsec.guide).
Plugin Claude Code
Bundles 14 skills, 1 agent · 1,409 tokens together
Builds source and binary code graphs for security analysis, context slicing, mutation testing, cryptographic protocol modeling, finding triage, and variant analysis.
Plugin Claude Code
Bundles 1 skill · 121 tokens together
Find similar vulnerabilities and bugs across codebases using pattern-based analysis.
Plugin Claude Code
Bundles 1 skill · 127 tokens together
Principled framework for triaging vulnerability reports using 7 brocards (rules of thumb). Evaluates incoming CVEs, bug bounty submissions, and security findings against structured dismissal/acceptance criteria before escalating to deeper analysis.
Plugin Claude Code
Bundles 1 skill · 111 tokens together
Structured Lean 4 proof writing and library design following Mathlib conventions.
Plugin Claude Code
Bundles 1 skill · 83 tokens together
YARA-X detection rule authoring with linting and quality analysis.
Plugin Claude Code
Bundles 1 skill, 11 agents, 1 MCP server · 631 tokens together
Detects missing or compiler-optimized zeroization of sensitive data with assembly and control-flow analysis.
Plugin Claude Code
Bundles 1 skill · 86 tokens together
Validates security patches against the reported bug, root-cause variants, and surrounding behavior. Returns reproducible failures to repair and validation gaps, with pinned inputs and saved evidence. Bundles a validate-patch dynamic workflow for Claude Code.
Plugin Claude Code
Bundles 1 skill · 22 tokens together
Generates an interactive HTML walkthrough for reviewing code changes. Use only when explicitly called.
Plugin Claude Code
Bundles 1 skill · 47 tokens together
Diagnose and fix Claude in Chrome MCP extension connectivity issues.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: