trailofbits/skills

Plugin marketplace

Claude Code plugins from Trail of Bits for enhanced AI-assisted security analysis and development

GitHub stars: 8.1K
plugins: 47
last updated: Nov 11, 2026

View on GitHub

Add marketplace

/plugin marketplace add trailofbits/skills

Run it inside Claude Code, then install plugins from it with /plugin.

Plugins

1agentic-actions-auditorAudits GitHub Actions workflows for security vulnerabilities in AI agent integrations (Claude Code Action, Gemini CLI, OpenAI Codex, GitHub AI Inference)1.3.2version

2ask-questions-if-underspecifiedClarify ambiguous requirements by asking questions before implementing. Only when invoked explicitly.1.0.1version

3audit-context-buildingUnderstand a codebase before looking for bugs in it. Reads it function by function, records what each one assumes and depends on, and saves the write-ups to files instead of filling up the conversation.2.0.2version

4building-secure-contractsComprehensive smart contract security toolkit based on Trail of Bits' Building Secure Contracts framework. Includes vulnerability scanners for 6 blockchains and 5 development guideline assistants.1.2.2version

5burpsuite-project-parserSearch and extract data from Burp Suite project files (.burp) for security analysis1.1.2version

6c-reviewComprehensive C/C++ security code review, with coverage verified against a parse of the source2.0.4version

7chrome-mcp-troubleshootingDiagnose and fix Claude in Chrome MCP extension connectivity issues1.1.5version

8claude-in-chrome-troubleshootingDiagnose and fix Claude in Chrome MCP extension connectivity issues1.0.0version

9code-improverImproves code targets — skills, plugins, or a branch's changes — through an autonomous review-and-fix workflow with a pluggable reviewer (any installed skill or agent), a cross-round findings ledger, oscillation escalation, and a mechanical scope guard.1.0.3version

10constant-time-analysisDetect compiler-induced timing side-channels in cryptographic code0.2.6version

11culture-indexInterprets Culture Index survey results for individuals and teams1.1.6version

12cvss-scoringProduces CVSS v4.0 vector strings from plain-text vulnerability descriptions by systematically evaluating base metrics. Use when scoring a vulnerability, generating a CVSS vector, or estimating severity.1.2.0version

13debug-buttercupDebug Buttercup Kubernetes deployments1.0.0version

14devcontainer-setupCreate pre-configured devcontainers with Claude Code and language-specific tooling0.2.5version

15differential-reviewSecurity-focused differential review of code changes with git history analysis and blast radius estimation1.1.4version

16dimensional-analysisAudits code for unit and decimal-scaling bugs and annotates it with dimensional comments recording the units of each value. Use when someone asks to audit or review code for unit confusion, decimals or scaling mismatches, WAD/RAY scale errors, or the wrong token's decimals; to annotate units in a codebase; or to perform a dimensional analysis of a DeFi protocol, offchain code, or other arithmetic-heavy codebase. Catches formulas that combine values carrying different units or scales.3.2.0version

17dwarf-expertAnalyze DWARF debug information: parse and search DIEs with dwarfdump and readelf, verify debug info integrity, and write DWARF parsing code1.1.2version

18entry-point-analyzerAnalyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify state, categorizes them by access level, and generates structured audit reports.2.0.0version

19firebase-apk-scannerScan Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions. For authorized security research only.2.2.3version

20fp-checkSystematic false positive verification for security bug analysis with mandatory gate reviews1.0.5version

21gh-cliIntercepts GitHub URL fetches (WebFetch and MCP fetch tools) and curl/wget commands, redirecting to the authenticated gh CLI.1.6.3version

22git-cleanupSafely analyzes and cleans up local git branches and worktrees by categorizing them as merged, squash-merged, superseded, or active work.2.3.3version

23github-triageTriages a repository's open GitHub issues and pull requests via the gh CLI: optionally merges ready bot and maintainer-approved PRs and spawns review subagents for unreviewed ones, closes already-resolved issues with referenced explanations, cross-links issues with pending fix PRs, and assigns local-only priority and change-size estimates.0.2.0version

24goal-promptDrafts copy-ready /goal commands for goal mode in Claude Code and Codex: verifiable completion conditions with stop bounds, normalized to a single line under the 4,000-character cap.0.1.2version

25insecure-defaultsDetects insecure default configurations including hardcoded credentials, fallback secrets, weak authentication defaults, and dangerous values in production2.0.3version

26let-fate-decideDraws the 12 Houses of the Zodiac Tarot spread using cryptographic randomness to add 100+ bits of entropy to vague or underspecified planning. Interprets the spread to guide next steps. Use when feeling lucky, invoking heart-of-the-cards energy, or when prompts are ambiguous.1.2.6version

27modern-cppModern C++ best practices (C++20/23/26). Use when writing C++ code, creating new C++ projects, or modernizing legacy C++ patterns.1.0.2version

28modern-pythonModern Python best practices. Use when creating new Python projects, and writing Python scripts, or migrating existing projects from legacy tools.1.6.2version

29mutation-testingConfigures mewt or muton campaigns, analyzes surviving mutants, and investigates bugs exposed by testing gaps. Use when setting up mutation testing, reviewing campaign results, identifying equivalent mutants, or finding bugs from surviving mutations.1.9.2version

30open-sourcingPrepares a repository for public open-source release: secrets-history hygiene, license selection, documentation and CI readiness checks, and language-specific packaging and release guidance.0.1.2version

31patching-bugsAgent-orchestrated workflow to reproduce, patch, prove and regression-check one known bug.0.5.1version

32post-patch-validationValidates security patches against the reported bug, root-cause variants, and surrounding behavior. Returns reproducible failures to repair and validation gaps, with pinned inputs and saved evidence. Bundles a validate-patch dynamic workflow for Claude Code.0.2.2version

33property-based-testingWrite, review, and triage property-based tests — Hypothesis, fast-check, proptest, and Echidna or Medusa for Solidity invariants1.2.2version

34regression-huntAgent-orchestrated skills for finding, reproducing and adjudicating regressions in PRs or commits.1.2.0version

35review-walkthroughGenerates an interactive HTML walkthrough for reviewing code changes. Use only when explicitly called.1.2.3version

36rust-reviewComprehensive Rust security code review with specialized bug-finding agents covering the safe/unsafe boundary, memory safety in unsafe blocks, concurrency, panic-induced DoS, recursion-induced stack overflow, FFI, and async runtime hazards1.1.2version

37second-opinionGets independent code reviews from Codex or Antigravity for uncommitted changes, branch diffs, and commits.1.8.3version

38semgrep-rule-creatorCreate custom Semgrep rules for detecting bug patterns and security vulnerabilities1.2.6version

39semgrep-rule-variant-creatorCreates language variants of existing Semgrep rules with proper applicability analysis and test-driven validation1.1.4version

40sharp-edgesIdentify error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes1.1.3version

41spec-to-code-complianceCheck code against the documentation that specifies it: one agent per requirement, divergences refuted before they are reported, evidence cited to the line2.0.2version

42static-analysisStatic analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection1.5.1version

43supply-chain-risk-auditorAudit a project's npm, PyPI, and Go dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree, abandoned upstreams, npm publisher concentration, and install scripts2.0.4version

44testing-handbook-skillsSkills from the Trail of Bits Application Security Testing Handbook (appsec.guide)1.2.2version

45trailmarkBuilds source and binary code graphs for security analysis, context slicing, mutation testing, cryptographic protocol modeling, finding triage, and variant analysis.0.12.2version

46variant-analysisFind similar vulnerabilities and bugs across codebases using pattern-based analysis2.0.4version

47vulnerability-triage-brocardsPrincipled framework for triaging vulnerability reports using 7 brocards (rules of thumb). Evaluates incoming CVEs, bug bounty submissions, and security findings against structured dismissal/acceptance criteria before escalating to deeper analysis.0.1.3version

48workflow-skill-designTeaches design patterns for workflow-based Claude Code skills and provides a review agent for auditing existing skills1.0.1version

49writing-lean-proofsStructured Lean 4 proof writing and library design following Mathlib conventions0.1.2version

50yara-authoringYARA-X detection rule authoring with linting and quality analysis2.2.1version

51zeroize-auditDetects missing or compiler-optimized zeroization of sensitive data with assembly and control-flow analysis0.4.2version

Details

Repository: github.com/trailofbits/skills
Categories: community
Listed since: Feb 24, 2026