skills
by trailofbits
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
About
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
Skill Analysis
Skills (248)
"Iteratively reviews and fixes Claude Code skill quality issues until they meet standards. Runs automated fix-review cycles using the skill-reviewer a...
textPerforms security-focused differential review of code changes
"Models attacker perspectives and builds exploit scenarios for HIGH RISK code changes. Use when differential review identifies high-risk changes that ...
markdown>
Creates devcontainers with Claude Code, language-specific tooling (Python/Node/Rust/Go), and persistent volumes. Use when adding devcontainer support ...
dockerfilejsonmermaid"Runs a Trailmark summary analysis on a codebase. Returns auto-detected languages, entry point count, and dependency list. Use when vivisect or galvan...
bash"Builds and queries multi-language source code graphs for security analysis. Includes pre-analysis passes for blast radius, taint propagation, privile...
bashpython"Graph-informed mutation testing triage. Parses codebases with Trailmark, runs mutation testing and necessist, then uses survived mutants, unnecessary...
bashmarkdown>
bashmarkdownmermaidpython"Runs full Trailmark structural analysis on Trailmark 0.2.x by building a graph, running `preanalysis()`, and reporting hotspots, taint, blast radius,...
bash>
bashpython"Translates Mermaid sequenceDiagrams describing cryptographic protocols into ProVerif formal verification models (.pv files). Use when generating a Pr...
proverif"Extracts protocol message flow from source code, RFCs, academic papers, pseudocode, informal prose, ProVerif (.pv), or Tamarin (.spthy) models and ge...
bashmarkdown"Mutation-driven test vector generation. Finds implementations of a cryptographic algorithm or protocol, runs mutation testing to identify escaped mut...
bash>
bashpython"Performs crate-level MIR and LLVM IR analysis for Rust in zeroize-audit. A single instance runs per crate (unlike 3-tu-compiler-analyzer which runs o...
bashjson"Generates runtime validation test harnesses (C tests, MSAN, Valgrind targets) for confirmed zeroize-audit findings. Produces a Makefile for automated...
"Crafts bespoke proof-of-concept programs demonstrating that zeroize-audit findings are exploitable. Reads source code and finding details to generate...
bashjsonrusttoml"Collects all findings from source and compiler analysis, applies supersessions and confidence gates, normalizes IDs, and produces a comprehensive mar...
bashjsonmarkdown"Performs per-TU compiler-level analysis (IR diff, assembly, semantic IR, CFG) for zeroize-audit. One instance runs per translation unit, enabling par...
bashjson
Recent Commits
- cfe5d7b2026-06-30Rust review plugin (#178)Andrea Cappa (zi0Black)
- 39e10bd2026-06-24build(deps): Bump actions/checkout from 6.0.3 to 7.0.0 in the all group (#191)dependabot[bot]
- ff4162d2026-06-22Update fp-check with links and best practices update (#189)Jay Little
- c070b9b2026-06-10fix(fp-check): use correct JSON response format in stop hooks (#129)jonnydevs
- 64a8c3f2026-06-10Update second-opinion Codex model to gpt-5.5 (#163)Matthew Kern
- 55771192026-06-10fix(semgrep-rule-creator): correct 404ing semgrep-docs links (#179)Jamie Reid
- c910ecf2026-06-10Bump actions/checkout from 6.0.2 to 6.0.3 in the all group (#182)dependabot[bot]
- d5fe2e62026-06-05feat(codex): add UI metadata for skills (#175)Lixin2026
- f09e5c72026-06-05Remove legacy codex compatiblity scripts/shims. (#173)William Tan
- c94841b2026-05-27Fix for when CLAUDE_PLUGIN_ROOT contains spaces (#169)Tim Lander