Turn bookmarks into markdown for your agents
Turn X bookmarks, Chrome tabs + YouTube URLs into markdown for agents 🦞 ↗
home / skills / trailofbits / skills
trailofbits/skills
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
61 skills
GitHubSponsored
differential-review
trailofbits/skills
3.0k
This skill performs security-focused differential reviews of PRs and diffs, adapts depth by codebase size, and generates comprehensive markdown audit reports.
guidelines-advisor
trailofbits/skills
3.0k
This skill analyzes smart contract codebases using Trail of Bits guidelines to generate docs, assess architecture, upgradeability, testing, and provide
address-sanitizer
trailofbits/skills
3.0k
This skill helps fuzzers detect memory errors in C/C++ code using AddressSanitizer to find overflows and use-after-free issues.
entry-point-analyzer
trailofbits/skills
3.0k
This skill analyzes smart contracts to identify state-changing entry points, classify access levels, and generate structured audit reports for security reviews.
harness-writing
trailofbits/skills
3.0k
This skill helps you write robust fuzzing harnesses across languages to maximize coverage, determinism, and bug reproducibility.
wycheproof
trailofbits/skills
3.0k
This skill helps you validate crypto implementations against known attacks using Wycheproof test vectors across AES-GCM, ECDSA, RSA, and more.
substrate-vulnerability-scanner
trailofbits/skills
3.0k
This skill scans Substrate pallets for 7 critical vulnerabilities, analyzes code patterns, and reports fixes to strengthen audits.
skill-improver
trailofbits/skills
3.0k
This skill iteratively reviews and fixes Claude Code skills using the skill-reviewer agent to meet quality standards and improve descriptions.
secure-workflow-guide
trailofbits/skills
3.0k
This skill guides security analysis using Trail of Bits' 5-step workflow, runs Slither checks, generates diagrams, and documents security properties.
token-integration-analyzer
trailofbits/skills
3.0k
This skill analyzes token implementations and integrations against ERC20/ERC721 standards, identifies 20+ weird patterns, and flags on-chain risks for secure
ask-questions-if-underspecified
trailofbits/skills
3.0k
This skill helps clarify ambiguous requests by generating concise must-have questions to ensure accurate implementation.
audit-prep-assistant
trailofbits/skills
3.0k
This skill prepares codebases for security reviews by guiding goals, running static analysis, boosting test coverage, removing dead code, and generating
cairo-vulnerability-scanner
trailofbits/skills
3.0k
This skill scans Cairo/StarkNet contracts for 6 critical vulnerabilities and provides actionable fixes to strengthen security before deployment.
cosmos-vulnerability-scanner
trailofbits/skills
3.0k
This skill scans Cosmos SDK and CosmWasm code for 9 critical vulnerabilities, providing findings and fixes to harden chains.
using-gh-cli
trailofbits/skills
3.0k
This skill helps you interact with GitHub resources using the gh CLI, replacing curl or WebFetch for repos, PRs, issues, and API data.
skills
trailofbits/skills
3.0k
This skill enables targeted extraction from Burp Suite project files by leveraging the burpsuite-project-file-parser extension to search headers, audit items,
constant-time-analysis
trailofbits/skills
3.0k
This skill helps identify timing side-channel vulnerabilities in cryptographic code by flagging secret-dependent timing and branch behavior.
interpreting-culture-index
trailofbits/skills
3.0k
This skill interprets Culture Index profiles to reveal strengths, challenges, and team dynamics, guiding hiring, coaching, onboarding, and conflict resolution.
dwarf-expert
trailofbits/skills
3.0k
This skill helps you analyze DWARF debug information across v3-v5, answer standards questions, and assist code interacting with DWARF data.
insecure-defaults
trailofbits/skills
3.0k
This skill detects fail-open insecure defaults such as weak secrets and permissive config to help audit production readiness and secure deployments.
property-based-testing
trailofbits/skills
3.0k
This skill helps you apply property-based testing to serialization, parsing, validation, and smart contracts to improve coverage.
seatbelt-sandboxer
trailofbits/skills
3.0k
This skill generates minimal macOS Seatbelt sandbox configurations to isolate applications with allowlist-based profiles for secure, confined execution.
second-opinion
trailofbits/skills
3.0k
This skill provides an independent code review by integrating Codex and Gemini CLIs for uncommitted changes, diffs, or specific commits.
coverage-analysis
trailofbits/skills
3.0k
This skill helps you measure code exercised during fuzzing, identify blockers, and track harness improvements across campaigns.
semgrep-rule-creator
trailofbits/skills
3.0k
This skill helps you craft production-quality Semgrep rules with tests, taint mode, and validation to detect vulnerabilities and enforce standards.
semgrep-rule-variant-creator
trailofbits/skills
3.0k
This skill ports existing Semgrep rules to new languages, generating independent rule and test directories per target.
variant-analysis
trailofbits/skills
3.0k
This skill helps you locate variant vulnerabilities across codebases by pattern-based analysis and systematic auditing guidance.
sharp-edges
trailofbits/skills
3.0k
This skill helps identify API misuses and dangerous defaults to ensure secure-by-default design and resist footgun configurations.
spec-to-code-compliance
trailofbits/skills
3.0k
This skill verifies code matches documentation and identifies gaps between spec and implementation in blockchain audits.
fuzzing-obstacles
trailofbits/skills
3.0k
This skill helps you bypass anti-fuzzing obstacles by patching code for fuzzing builds while preserving production behavior.
codeql
trailofbits/skills
3.0k
This skill runs CodeQL analysis to detect security vulnerabilities across languages using interprocedural taint tracking and data flow insights.
semgrep
trailofbits/skills
3.0k
This skill runs a complete Semgrep security scan with parallel analysis, detects Pro cross-file analysis when available, and triages findings.
supply-chain-risk-auditor
trailofbits/skills
3.0k
This skill analyzes project dependencies to identify high-risk supply chain factors and generates a concise risk report for security engagements.
aflpp
trailofbits/skills
3.0k
This skill helps you accelerate fuzzing of C/C++ projects using AFL++'s multi-core capabilities and mature tooling for efficient coverage.
atheris
trailofbits/skills
3.0k
This skill helps you quickly fuzz Python code and C extensions using Atheris to uncover memory issues with libFuzzer integration.
cargo-fuzz
trailofbits/skills
3.0k
This skill helps you fuzz Rust projects quickly with cargo-fuzz, enabling libFuzzer-backed testing and sanitizer integration for robust code.
constant-time-testing
trailofbits/skills
3.0k
This skill helps identify timing side-channel leaks in cryptographic code by guiding statistical, dynamic, and formal analyses.
ossfuzz
trailofbits/skills
3.0k
This skill helps you set up and manage OSS-Fuzz continuous fuzzing infrastructure for open-source projects, including enrollment, building images, and running
designing-workflow-skills
trailofbits/skills
3.0k
This skill guides designing workflow-based Claude Code skills with multi-step phases, decision trees, and progressive disclosure to ensure robust routing and
libafl
trailofbits/skills
3.0k
This skill helps you build and customize fuzzers with LibAFL for advanced research, custom mutations, and fine-grained fuzzing control.
zeroize-audit
trailofbits/skills
3.0k
This skill detects missing zeroization of sensitive data in C/C++/Rust code and verifies compiler-induced zeroize removals with assembly evidence.
yara-rule-authoring
trailofbits/skills
3.0k
This skill guides authoring of high quality YARA-X rules for malware detection, focusing on performance, accuracy, and safe migration.
agentic-actions-auditor
trailofbits/skills
3.0k
This skill audits GitHub Actions workflows invoking AI agents to detect prompt injection risks and misconfigurations across CI/CD pipelines.
audit-context-building
trailofbits/skills
3.0k
This skill enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability hunting, reducing hallucinations and
algorand-vulnerability-scanner
trailofbits/skills
3.0k
This skill scans Algorand smart contracts for 11 vulnerabilities, delivering actionable findings and fixes to strengthen TEAL and PyTeal security.
code-maturity-assessor
trailofbits/skills
3.0k
This skill analyzes code maturity using Trail of Bits framework to produce evidence-based ratings and actionable improvement recommendations.
ton-vulnerability-scanner
trailofbits/skills
3.0k
This skill scans TON FunC contracts for three critical vulnerabilities, reports findings, and suggests fixes to improve security.
firebase-apk-scanner
trailofbits/skills
3.0k
This skill scans APKs for Firebase misconfigurations and surfaces exposed databases, auth gaps, and cloud functions risks to guide mobile security audits.
git-cleanup
trailofbits/skills
3.0k
This skill analyzes local git branches and worktrees, groups related work, and guides safe cleanup with user approval.
let-fate-decide
trailofbits/skills
3.0k
This skill helps resolve vague prompts by drawing and interpreting a 4-card Tarot spread to guide next steps.
modern-python
trailofbits/skills
3.0k
This skill helps you configure modern Python projects with uv, ruff, and ty, streamlining setup, tooling, and migrations.
sarif-parsing
trailofbits/skills
3.0k
This skill parses and analyzes SARIF files to aggregate findings, deduplicate alerts, and integrate security results into CI/CD workflows.
fuzzing-dictionary
trailofbits/skills
3.0k
This skill helps you craft targeted fuzzing dictionaries to improve parser and protocol coverage by injecting domain-specific tokens.
libfuzzer
trailofbits/skills
3.0k
This skill helps you fuzz C/C++ code quickly using libFuzzer with Clang integration, enabling fast, single-project coverage exploration.
ruzzy
trailofbits/skills
3.0k
This skill helps you fuzz Ruby code and C extensions using Ruzzy to discover memory safety and coverage issues.
testing-handbook-generator
trailofbits/skills
3.0k
This skill analyzes the Trail of Bits Testing Handbook to generate Claude Code security testing tools and technique templates for rapid integration.
claude-in-chrome-troubleshooting
trailofbits/skills
3.0k
This skill helps diagnose and fix Claude in Chrome MCP connectivity issues by managing native host configs and restart steps.
solana-vulnerability-scanner
trailofbits/skills
3.0k
This skill scans Solana programs for 6 critical vulnerabilities, identifies issues in CPI, PDA validation, signer checks, and sysvar spoofing.
debug-buttercup
trailofbits/skills
3.0k
This skill helps you diagnose and triage Buttercup CRS issues in the crs namespace by guiding log analysis, queue inspection, and failure pattern detection.