Snapshot của trailofbits/skills: 7.6k★ · Python · Security. Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
Tóm tắt dựng từ metadata GitHub của chính dự án — chưa có bài review TopGit. Trang sẽ tự động cập nhật khi bài review đầy đủ được xuất bản.
VÌ SAO CHƯA CÓ REVIEW
TopGit viết bài đầy đủ cho repo có nhiều sao nhất và được yêu cầu nhiều nhất. Trang này là snapshot trong thời gian chờ — xem README gốc ở tab READ ME.
A Claude Code plugin marketplace from Trail of Bits providing skills to enhance AI-assisted security analysis, testing, and development workflows. Codex can load this marketplace through its Claude marketplace compatibility.
Use this repository's .claude-plugin/marketplace.json for workspace imports.
Skills that include agents/openai.yaml also need interface.display_name and
interface.short_description in that YAML file; plugin metadata does not supply them.
After a metadata fix is published, sync the repository again in your workspace
marketplace to retry failed imports.
Local Development
To add the marketplace locally (e.g., for testing or development), navigate to the parent directory of this repository:
cd /path/to/parent # e.g., if repo is at ~/projects/skills, be in ~/projects
/plugins marketplace add ./skills
Available Plugins
Smart Contract Security
Plugin
Description
building-secure-contracts
Smart contract security toolkit with vulnerability scanners for 6 blockchains and 5 development guideline assistants
entry-point-analyzer
Identify state-changing entry points in smart contracts for security auditing
Code Auditing
Plugin
Description
agentic-actions-auditor
Audit GitHub Actions workflows for AI agent security vulnerabilities
audit-context-building
Understand a codebase before looking for bugs in it, one function at a time
burpsuite-project-parser
Search and extract data from Burp Suite project files
c-review
Comprehensive C/C++ security code review, with coverage verified against a parse of the source
differential-review
Security-focused differential review of code changes with git history analysis
dimensional-analysis
Annotate codebases with dimensional analysis comments to detect unit mismatches and formula bugs
fp-check
Systematic false positive verification for security bug analysis with mandatory gate reviews
insecure-defaults
Parallel audit workflow for fail-open insecure defaults, with a refuting verifier per candidate file
rust-review
Comprehensive Rust security review covering safe/unsafe boundary, memory safety, concurrency, panic-DoS, FFI, and async runtime with SARIF output
semgrep-rule-creator
Create and refine Semgrep rules for custom vulnerability detection
semgrep-rule-variant-creator
Port existing Semgrep rules to new target languages with test-driven validation
sharp-edges
Identify error-prone APIs, dangerous configurations, and footgun designs
static-analysis
Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing
supply-chain-risk-auditor
Audit npm, PyPI, and Go dependencies for version-matched advisories, abandoned upstreams, publisher concentration, and install scripts
testing-handbook-skills
Skills from the Testing Handbook: fuzzers, static analysis, sanitizers, coverage
Scan Android APKs for Firebase security misconfigurations
Development
Plugin
Description
code-improver
Autonomous review-and-fix workflow over skills, plugins, or a branch, with a pluggable reviewer, findings ledger, escalation, and scope guard
devcontainer-setup
Create pre-configured devcontainers with Claude Code and language-specific tooling
gh-cli
Intercept GitHub URL fetches — WebFetch, MCP fetch tools, and curl/wget — and redirect to the authenticated gh CLI
git-cleanup
Safely clean up git worktrees and local branches: a dynamic workflow gathers merge evidence and tries to refute its own delete recommendations, behind gated confirmation
goal-prompt
Draft /goal commands for goal mode in Claude Code and Codex — verifiable completion conditions formatted to a copy-ready single line
github-triage
Triage open GitHub issues and PRs: merge ready bot/approved PRs, review unreviewed ones via subagents, close resolved issues with cited comments, cross-link pending fixes, and score the rest with local-only priority and change-size estimates
let-fate-decide
Draw Tarot cards using cryptographic randomness to add entropy to vague planning
modern-cpp
Modern C++ best practices (C++20/23/26) with compiler hardening and safe idioms
modern-python
Modern Python tooling and best practices with uv, ruff, and pytest
open-sourcing
Prepare a repository for public release: secrets hygiene, licensing, CI readiness, and release automation
review-walkthrough
Generate an interactive walkthrough of branch changes with ordered diffs, explanations, and anchored review findings
second-opinion
Get independent reviews from Codex or Antigravity for uncommitted changes, branch diffs, and commits
Team Management
Plugin
Description
culture-index
Interpret Culture Index survey results for individuals and teams
Tooling
Plugin
Description
chrome-mcp-troubleshooting
Diagnose and fix Claude in Chrome MCP extension connectivity issues
Trophy Case
Bugs discovered using Trail of Bits Skills. Found something? Let us know!
When reporting bugs you've found, feel free to mention:
Found using Trail of Bits Skills
Skill
Bug
constant-time-analysis
Timing side-channel in ML-DSA signing
Contributing
We welcome contributions! See AGENTS.md for skill authoring guidelines, and
run make check before you push — it runs most of CI locally (see AGENTS.md for
what it does not cover).
Codex provides advisory fast reviews for eligible PRs from this repository. Maintainers
with write access can request another fast review by commenting @codex review, or a
deeper review by applying the deep-review label. Fork PRs are excluded.
License
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License. Made by Trail of Bits.
Trang TopGit này là một snapshot — tab "Readme" hiển thị nguyên văn README của repo (đã bỏ link, giữ ảnh). Repo GitHub ở github.com/trailofbits/skills là nguồn chính thức.
trailofbits/skills có bao nhiêu sao?
trailofbits/skills có 7.6k sao GitHub — tải lại trang để xem số mới nhất, hoặc xem trực tiếp github.com/trailofbits/skills. TopGit phản chiếu số sao của GitHub nhưng không cam kết đến từng phút.
trailofbits/skills có phải mã nguồn mở không?
Có — trailofbits/skills phát hành theo license CC-BY-SA-4.0, nghĩa là mã nguồn mở để đọc, fork và (tùy license) tái sử dụng. Mã: github.com/trailofbits/skills.
trailofbits/skills còn đang phát triển không?
Commit gần nhất trên trailofbits/skills là 12 ngày trước (theo timestamp GitHub). Repo có 658 fork — một chỉ báo về mức độ quan tâm của cộng đồng.
trailofbits/skills là gì?
trailofbits/skills (trailofbits/skills) là dự án Python trên GitHub. Theo mô tả gốc: Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
trailofbits/skills so với các dự án Security khác thế nào?
trailofbits/skills được TopGit xếp vào nhóm Security, với 7.6k sao GitHub và viết bằng Python. Xem trang chủ đề Security trên TopGit để so sánh với các dự án tương tự theo số sao và mức độ hoạt động.
Đọc đầy đủ README ở tab phía trên.
Muốn nghe thêm một ý kiến về skills?
Hỏi một AI đọc được trang này — một cú bấm là có ngay nhận định về skills.
/skills