skills

Trail of Bits skills for security research, vulnerability detection, and audit workflows

/plugin marketplace add trailofbits/skills

48 skills

AddressSanitizer

Runs C, C++ and Rust code under AddressSanitizer to catch memory errors.

trailofbits/skills7.9k

Adjudicate Regression

Use when deciding whether source and live reproduction evidence establish a new...

trailofbits/skills7.9k

Aflpp

Sets up and runs AFL++ for multi-core fuzzing of C/C++ projects built with...

trailofbits/skills7.9k

Agentic Actions Auditor

Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations...

trailofbits/skills7.9k

Algorand Vulnerability Scanner

Scans Algorand smart contracts for 11 common vulnerabilities including rekeying...

trailofbits/skills7.9k

Atheris

Sets up and runs Atheris, the coverage-guided Python fuzzer built on libFuzzer.

trailofbits/skills7.9k

Audit Augmentation

Augments Trailmark code graphs with external audit findings from SARIF static analysis...

trailofbits/skills7.9k

Audit Context Building

Understand a codebase before looking for bugs in it - what each function assumes, what...

trailofbits/skills7.9k

Audit Prep Assistant

Prepares codebases for security review using Trail of Bits' checklist.

trailofbits/skills7.9k

Burpsuite Project Parser

Searches and explores Burp Suite project files (.burp) from the command line.

trailofbits/skills7.9k

C Review

Performs comprehensive C/C++ security review for memory corruption, integer overflows...

trailofbits/skills7.9k

Cairo Vulnerability Scanner

Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252...

trailofbits/skills7.9k

Cargo Fuzz

Sets up and runs cargo-fuzz, the standard fuzzing tool for Cargo-based Rust projects.

trailofbits/skills7.9k

Chrome MCP Troubleshooting

Diagnose and fix Claude in Chrome MCP extension connectivity issues.

trailofbits/skills7.9k

Code Improver

Runs an autonomous review-and-fix improvement loop over any code target, a skill...

trailofbits/skills7.9k

Code Maturity Assessor

Systematic code maturity assessment using Trail of Bits' 9-category framework.

trailofbits/skills7.9k

Codeql

Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow...

trailofbits/skills7.9k

Constant Time Analysis

Detects timing side-channel vulnerabilities in cryptographic code.

trailofbits/skills7.9k

Constant Time Testing

Measures timing side channels in cryptographic implementations by running them, using...

trailofbits/skills7.9k

Cosmos Vulnerability Scanner

Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical...

trailofbits/skills7.9k

Coverage Analysis

Measures and interprets what a fuzzing campaign actually reaches, using llvm-cov, lcov...

trailofbits/skills7.9k

Crypto Protocol Diagram

Extracts protocol message flow from source code, RFCs, academic papers, pseudocode...

trailofbits/skills7.9k

Devcontainer Setup

Creates devcontainers with Claude Code, language-specific tooling...

trailofbits/skills7.9k

Diagramming Code

Generates Mermaid diagrams from Trailmark code graphs.

trailofbits/skills7.9k

Differential Review

Performs security-focused differential review of code changes.

trailofbits/skills7.9k

Dimensional Analysis

Audits code for unit and decimal-scaling bugs and annotates it with dimensional...

trailofbits/skills7.9k

Dwarf Expert

Analyzes DWARF debug information in compiled binaries.

trailofbits/skills7.9k

Entry Point Analyzer

Analyzes smart contract codebases to identify state-changing entry points for security...

trailofbits/skills7.9k

Firebase Apk Scanner

Scans Android APKs for Firebase security misconfigurations including open databases...

trailofbits/skills7.9k

Fp Check

Systematically verifies suspected security bugs to eliminate false positives, producing...

trailofbits/skills7.9k

Fuzzing Dictionary

Builds and applies fuzzing dictionaries so a fuzzer can produce the keywords, magic...

trailofbits/skills7.9k

Fuzzing Obstacles

Patches past the barriers that stop a fuzzer making progress, checksum and hash...

trailofbits/skills7.9k

Genotoxic

Graph-informed mutation testing triage.

trailofbits/skills7.9k

Gh CLI

Enforces authenticated gh CLI workflows over unauthenticated curl, WebFetch, and MCP...

trailofbits/skills7.9k

Github Triage

Triages a repository's open GitHub issues and pull requests via the gh CLI.

trailofbits/skills7.9k

Goal Prompt

Drafts copy-paste-ready /goal commands for goal mode in Claude Code and Codex.

trailofbits/skills7.9k

Graph Evolution

Compares Trailmark code graphs at two source code snapshots (git commits, tags, or...

trailofbits/skills7.9k

Guidelines Advisor

Smart contract development advisor based on Trail of Bits' best practices.

trailofbits/skills7.9k

Harness Writing

Designs and improves fuzzing harnesses for C/C++ and Rust.

trailofbits/skills7.9k

Hunt Regressions

Use when discovering possible regressions from a pinned change and its callers before...

trailofbits/skills7.9k

Implement Patch

Use when a confirmed local bug needs an invariant-level fix, variant search, tests, and...

trailofbits/skills7.9k

Let Fate Decide

Draws the 12 Houses of the Zodiac Tarot spread to inject entropy into planning when...

trailofbits/skills7.9k

Libfuzzer

Sets up and runs libFuzzer, the coverage-guided fuzzer built into LLVM, on C/C++ code...

trailofbits/skills7.9k

Mermaid To Proverif

Translates Mermaid sequenceDiagrams describing cryptographic protocols into ProVerif...

trailofbits/skills7.9k

Modern Cpp

Guides C++ code toward modern idioms (C++20/23/26).

trailofbits/skills7.9k

Modern Python

Configures Python projects with modern tooling (uv, ruff, ty).

trailofbits/skills7.9k

Mutation Testing

Configures mewt or muton campaigns, analyzes surviving mutants, and investigates bugs...

trailofbits/skills7.9k

Open Sourcing

Should be used when the user asks to "open source this project", "prepare this...

trailofbits/skills7.9k