skills README

The project's README from github.com/trailofbits/skills. As one markdown file: README.md.

Trail of Bits Skills Marketplace

A Claude Code plugin marketplace from Trail of Bits providing skills to enhance AI-assisted security analysis, testing, and development workflows. Codex can load this marketplace through its Claude marketplace compatibility.

Also see: claude-code-config · codex-config · skills-curated · claude-code-devcontainer · dropkit · coop

Installation

Claude Code Marketplace

/plugin marketplace add trailofbits/skills

Browse and Install Plugins

/plugin menu

Codex

Codex supports Claude plugin marketplaces directly, so this repository does not need Codex-specific sidecar metadata.

Install the marketplace with:

codex plugin marketplace add trailofbits/skills
codex plugin list
codex plugin add <plugin-name>@trailofbits

Local Development

To add the marketplace locally (e.g., for testing or development), navigate to the parent directory of this repository:

cd /path/to/parent  # e.g., if repo is at ~/projects/skills, be in ~/projects
/plugins marketplace add ./skills

Available Plugins

Smart Contract Security

Plugin Description
building-secure-contracts Smart contract security toolkit with vulnerability scanners for 6 blockchains and 5 development guideline assistants
entry-point-analyzer Identify state-changing entry points in smart contracts for security auditing

Code Auditing

Plugin Description
agentic-actions-auditor Audit GitHub Actions workflows for AI agent security vulnerabilities
audit-context-building Understand a codebase before looking for bugs in it, one function at a time
burpsuite-project-parser Search and extract data from Burp Suite project files
c-review Comprehensive C/C++ security code review, with coverage verified against a parse of the source
differential-review Security-focused differential review of code changes with git history analysis
dimensional-analysis Annotate codebases with dimensional analysis comments to detect unit mismatches and formula bugs
fp-check Systematic false positive verification for security bug analysis with mandatory gate reviews
insecure-defaults Parallel audit workflow for fail-open insecure defaults, with a refuting verifier per candidate file
rust-review Comprehensive Rust security review covering safe/unsafe boundary, memory safety, concurrency, panic-DoS, FFI, and async runtime with SARIF output
semgrep-rule-creator Create and refine Semgrep rules for custom vulnerability detection
semgrep-rule-variant-creator Port existing Semgrep rules to new target languages with test-driven validation
sharp-edges Identify error-prone APIs, dangerous configurations, and footgun designs
static-analysis Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing
supply-chain-risk-auditor Audit npm, PyPI, and Go dependencies for version-matched advisories, abandoned upstreams, publisher concentration, and install scripts
testing-handbook-skills Skills from the Testing Handbook: fuzzers, static analysis, sanitizers, coverage
trailmark Code graph analysis, bounded subagent context slicing, Mermaid diagrams, mutation testing triage, and protocol verification
variant-analysis Find similar vulnerabilities across codebases using pattern-based analysis
vulnerability-triage-brocards Triage vulnerability reports using 7 brocards to accept, dismiss, or request more info before deeper analysis

Malware Analysis

Plugin Description
yara-authoring YARA detection rule authoring with linting, atom analysis, and best practices

Verification

Plugin Description
constant-time-analysis Detect compiler-induced timing side-channels in cryptographic code
mutation-testing Configure mewt/muton mutation testing campaigns — scope targets, tune timeouts, optimize long runs
property-based-testing Write, review, and triage property-based tests — Hypothesis, fast-check, proptest, and Echidna or Medusa for Solidity invariants
spec-to-code-compliance Check code against the documentation that specifies it, across contracts, C/C++, services, and firmware
writing-lean-proofs Write structured Lean 4 proofs and design Lean libraries following Mathlib conventions
zeroize-audit Detect missing or compiler-eliminated zeroization of secrets in C/C++ and Rust

Reverse Engineering

Plugin Description
dwarf-expert Analyze DWARF debug info: parse and search DIEs, verify integrity, write DWARF parsing code

Mobile Security

Plugin Description
firebase-apk-scanner Scan Android APKs for Firebase security misconfigurations

Development

Plugin Description
code-improver Autonomous review-and-fix workflow over skills, plugins, or a branch, with a pluggable reviewer, findings ledger, escalation, and scope guard
devcontainer-setup Create pre-configured devcontainers with Claude Code and language-specific tooling
gh-cli Intercept GitHub URL fetches — WebFetch, MCP fetch tools, and curl/wget — and redirect to the authenticated gh CLI
git-cleanup Safely clean up git worktrees and local branches: a dynamic workflow gathers merge evidence and tries to refute its own delete recommendations, behind gated confirmation
goal-prompt Draft /goal commands for goal mode in Claude Code and Codex — verifiable completion conditions formatted to a copy-ready single line
github-triage Triage open GitHub issues and PRs: merge ready bot/approved PRs, review unreviewed ones via subagents, close resolved issues with cited comments, cross-link pending fixes, and score the rest with local-only priority and change-size estimates
let-fate-decide Draw Tarot cards using cryptographic randomness to add entropy to vague planning
modern-cpp Modern C++ best practices (C++20/23/26) with compiler hardening and safe idioms
modern-python Modern Python tooling and best practices with uv, ruff, and pytest
open-sourcing Prepare a repository for public release: secrets hygiene, licensing, CI readiness, and release automation
second-opinion Run code reviews using external LLM CLIs (OpenAI Codex, Google Antigravity) on changes, diffs, or commits. Bundles Codex's built-in MCP server.

Team Management

Plugin Description
culture-index Interpret Culture Index survey results for individuals and teams

Tooling

Plugin Description
claude-in-chrome-troubleshooting Diagnose and fix Claude in Chrome MCP extension connectivity issues

Trophy Case

Bugs discovered using Trail of Bits Skills. Found something? Let us know!

When reporting bugs you've found, feel free to mention:

Found using Trail of Bits Skills

Skill Bug
constant-time-analysis Timing side-channel in ML-DSA signing

Contributing

We welcome contributions! See AGENTS.md for skill authoring guidelines, and run make check before you push — it runs most of CI locally (see AGENTS.md for what it does not cover).

License

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License. Made by Trail of Bits.

skills (trailofbits/skills)

cryptography
Searching Database…

7.6K ·GitHub
Skills
What is this?This is Trail of Bits' Claude Code plugin marketplace: a curated collection of AI-agent skills for security research, vulnerability detection, and audit workflows, covering everything from smart contract audits to malware analysis and reverse engineering.
Is this a standalone tool or a plugin collection for Claude Code?It's not a standalone app; it's a marketplace of Claude Code plugins/skills that you load into Claude Code (or Codex, which supports the same marketplace format) to give the AI assistant specialized security-review capabilities.
How do I install these skills?Add the marketplace to Claude Code and then browse the catalog to install individual plugins; for local development, you can instead point Claude Code at this repo from the parent directory.
Do I need anything besides Claude Code to use these skills?You need Claude Code (or Codex) installed, and some individual plugins assume external security tooling is available, such as Semgrep, CodeQL, YARA, or Hypothesis/Echidna for property-based testing.
Do all the plugins work the same way out of the box?No — each plugin targets a different domain (Solidity, C/C++, Rust, DWARF binaries, Android APKs, Lean proofs, etc.), so coverage and setup effort vary a lot depending on which skill you install.
Who is this built for?Security researchers, auditors, and engineers who use Claude Code for code review, smart contract audits, malware analysis, or vulnerability triage and want pre-built expert workflows instead of ad-hoc prompting.
Does it only run inside Claude Code, or also Codex?It's designed for Claude Code but also works in Codex, since Codex directly supports the Claude plugin marketplace format without any extra configuration.
What categories of plugins are included?The marketplace is organized into Smart Contract Security, Code Auditing, Malware Analysis, Verification, Reverse Engineering, Mobile Security, Development, Team Management, and Tooling — around 30 plugins total covering tasks like CodeQL/Semgrep static analysis, YARA rule authoring, DWARF parsing, and Lean proof writing.
Has this actually found real bugs?Yes — the repo keeps a 'Trophy Case' of real findings, including a timing side-channel in ML-DSA signing discovered using the constant-time-analysis skill.
What does the building-secure-contracts plugin do?It's a smart contract security toolkit bundling vulnerability scanners for six blockchains plus five development-guideline assistants, aimed at auditing Solidity and similar contract code.
What are similar projects?Anthropic-Cybersecurity-Skills, Seep-Reverse-Lab, ablation, vuls, awesome-reverse-engineering, Airsec, ida-pro-mcp, wifit3
Which topics is it in?vulnerability-management, vulnerability-detection, security-audit, malware-analysis, smart-contracts, cryptography, code-review, static-analysis, reverse-engineering, cybersecurity, plugin, agent-skills
Creator
trailofbits
Size
6.4 MB
Stars
7.6K
Updated
CommitOct 15
Age
9mo
Commits · 90 Days