home / skills / trailofbits

trailofbits skills

Find 55 skills from 1 repo created by trailofbits on GitHub.

1 repo

55 skills

Sponsored

Advertise on playbooks

Put your product in front of developers browsing MCP servers and agent skills. ↗

yara-rule-authoring

trailofbits/skills

This skill guides authoring of high quality YARA-X rules for malware detection, focusing on performance, accuracy, and safe migration.

cosmos-vulnerability-scanner

trailofbits/skills

This skill scans Cosmos SDK and CosmWasm code for 9 critical vulnerabilities, providing findings and fixes to harden chains.

debug-buttercup

trailofbits/skills

This skill helps you diagnose and triage Buttercup CRS issues in the crs namespace by guiding log analysis, queue inspection, and failure pattern detection.

audit-prep-assistant

trailofbits/skills

This skill prepares codebases for security reviews by guiding goals, running static analysis, boosting test coverage, removing dead code, and generating

devcontainer-setup

trailofbits/skills

This skill creates pre-configured devcontainers with Claude Code and language tooling for Python, Node, Rust, or Go, enabling isolated, persistent development

Advertise on playbooks

Reach thousands of developers actively evaluating dev tools, MCP servers, and agent skills. Floating banners, pinned cards, and in-feed placements.

differential-review

trailofbits/skills

This skill performs security-focused differential reviews of PRs and diffs, adapts depth by codebase size, and generates comprehensive markdown audit reports.

entry-point-analyzer

trailofbits/skills

This skill analyzes smart contracts to identify state-changing entry points, classify access levels, and generate structured audit reports for security reviews.

insecure-defaults

trailofbits/skills

This skill detects fail-open insecure defaults such as weak secrets and permissive config to help audit production readiness and secure deployments.

trailofbits/skills

This skill helps you configure modern Python projects with uv, ruff, and ty, streamlining setup, tooling, and migrations.

property-based-testing

trailofbits/skills

This skill helps you apply property-based testing to serialization, parsing, validation, and smart contracts to improve coverage.

spec-to-code-compliance

trailofbits/skills

This skill verifies code matches documentation and identifies gaps between spec and implementation in blockchain audits.

trailofbits/skills

This skill helps you set up and manage OSS-Fuzz continuous fuzzing infrastructure for open-source projects, including enrollment, building images, and running

trailofbits/skills

This skill helps you validate crypto implementations against known attacks using Wycheproof test vectors across AES-GCM, ECDSA, RSA, and more.

guidelines-advisor

trailofbits/skills

This skill analyzes smart contract codebases using Trail of Bits guidelines to generate docs, assess architecture, upgradeability, testing, and provide

claude-in-chrome-troubleshooting

trailofbits/skills

This skill helps diagnose and fix Claude in Chrome MCP connectivity issues by managing native host configs and restart steps.

trailofbits/skills

This skill helps identify API misuses and dangerous defaults to ensure secure-by-default design and resist footgun configurations.

testing-handbook-generator

trailofbits/skills

This skill analyzes the Trail of Bits Testing Handbook to generate Claude Code security testing tools and technique templates for rapid integration.

trailofbits/skills

This skill helps you analyze DWARF debug information across v3-v5, answer standards questions, and assist code interacting with DWARF data.

ask-questions-if-underspecified

trailofbits/skills

This skill helps clarify ambiguous requests by generating concise must-have questions to ensure accurate implementation.

audit-context-building

trailofbits/skills

This skill enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability hunting, reducing hallucinations and

algorand-vulnerability-scanner

trailofbits/skills

This skill scans Algorand smart contracts for 11 vulnerabilities, delivering actionable findings and fixes to strengthen TEAL and PyTeal security.

cairo-vulnerability-scanner

trailofbits/skills

This skill scans Cairo/StarkNet contracts for 6 critical vulnerabilities and provides actionable fixes to strengthen security before deployment.

code-maturity-assessor

trailofbits/skills

This skill analyzes code maturity using Trail of Bits framework to produce evidence-based ratings and actionable improvement recommendations.

secure-workflow-guide

trailofbits/skills

This skill guides security analysis using Trail of Bits' 5-step workflow, runs Slither checks, generates diagrams, and documents security properties.

solana-vulnerability-scanner

trailofbits/skills

This skill scans Solana programs for 6 critical vulnerabilities, identifies issues in CPI, PDA validation, signer checks, and sysvar spoofing.

token-integration-analyzer

trailofbits/skills

This skill analyzes token implementations and integrations against ERC20/ERC721 standards, identifies 20+ weird patterns, and flags on-chain risks for secure

ton-vulnerability-scanner

trailofbits/skills

This skill scans TON FunC contracts for three critical vulnerabilities, reports findings, and suggests fixes to improve security.

trailofbits/skills

This skill enables targeted extraction from Burp Suite project files by leveraging the burpsuite-project-file-parser extension to search headers, audit items,

constant-time-analysis

trailofbits/skills

This skill helps identify timing side-channel vulnerabilities in cryptographic code by flagging secret-dependent timing and branch behavior.

interpreting-culture-index

trailofbits/skills

This skill interprets Culture Index profiles to reveal strengths, challenges, and team dynamics, guiding hiring, coaching, onboarding, and conflict resolution.

trailofbits/skills

This skill helps you interact with GitHub resources using the gh CLI, replacing curl or WebFetch for repos, PRs, issues, and API data.

trailofbits/skills

This skill analyzes local git branches and worktrees, groups related work, and guides safe cleanup with user approval.

firebase-apk-scanner

trailofbits/skills

This skill scans APKs for Firebase misconfigurations and surfaces exposed databases, auth gaps, and cloud functions risks to guide mobile security audits.

trailofbits/skills

This skill provides an independent code review by integrating Codex and Gemini CLIs for uncommitted changes, diffs, or specific commits.

semgrep-rule-variant-creator

trailofbits/skills

This skill ports existing Semgrep rules to new languages, generating independent rule and test directories per target.

trailofbits/skills

This skill runs CodeQL analysis to detect security vulnerabilities across languages using interprocedural taint tracking and data flow insights.

trailofbits/skills

This skill runs a complete Semgrep security scan with parallel analysis, detects Pro cross-file analysis when available, and triages findings.

trailofbits/skills

This skill helps you quickly fuzz Python code and C extensions using Atheris to uncover memory issues with libFuzzer integration.

trailofbits/skills

This skill helps you fuzz Rust projects quickly with cargo-fuzz, enabling libFuzzer-backed testing and sanitizer integration for robust code.

constant-time-testing

trailofbits/skills

This skill helps identify timing side-channel leaks in cryptographic code by guiding statistical, dynamic, and formal analyses.

coverage-analysis

trailofbits/skills

This skill helps you measure code exercised during fuzzing, identify blockers, and track harness improvements across campaigns.

fuzzing-dictionary

trailofbits/skills

This skill helps you craft targeted fuzzing dictionaries to improve parser and protocol coverage by injecting domain-specific tokens.

fuzzing-obstacles

trailofbits/skills

This skill helps you bypass anti-fuzzing obstacles by patching code for fuzzing builds while preserving production behavior.

trailofbits/skills

This skill helps you fuzz C/C++ code quickly using libFuzzer with Clang integration, enabling fast, single-project coverage exploration.

trailofbits/skills

This skill helps you fuzz Ruby code and C extensions using Ruzzy to discover memory safety and coverage issues.

variant-analysis

trailofbits/skills

This skill helps you locate variant vulnerabilities across codebases by pattern-based analysis and systematic auditing guidance.

designing-workflow-skills

trailofbits/skills

This skill guides designing workflow-based Claude Code skills with multi-step phases, decision trees, and progressive disclosure to ensure robust routing and

substrate-vulnerability-scanner

trailofbits/skills

This skill scans Substrate pallets for 7 critical vulnerabilities, analyzes code patterns, and reports fixes to strengthen audits.

trailofbits/skills

This skill parses and analyzes SARIF files to aggregate findings, deduplicate alerts, and integrate security results into CI/CD workflows.

semgrep-rule-creator

trailofbits/skills

This skill helps you craft production-quality Semgrep rules with tests, taint mode, and validation to detect vulnerabilities and enforce standards.

address-sanitizer

trailofbits/skills

This skill helps fuzzers detect memory errors in C/C++ code using AddressSanitizer to find overflows and use-after-free issues.

trailofbits/skills

This skill helps you accelerate fuzzing of C/C++ projects using AFL++'s multi-core capabilities and mature tooling for efficient coverage.

harness-writing

trailofbits/skills

This skill helps you write robust fuzzing harnesses across languages to maximize coverage, determinism, and bug reproducibility.

trailofbits/skills

This skill helps you build and customize fuzzers with LibAFL for advanced research, custom mutations, and fine-grained fuzzing control.

trailofbits/skills

This skill verifies that remediation commits address security findings without introducing bugs by comparing changes to audit reports.