skills
by trailofbits
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
About
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
Skill Analysis
Skills (94)
Propagates dimensional annotations through arithmetic and call chains, reporting mismatches found during propagation
solidityDiscovers dimensional vocabulary for codebases by analyzing naming conventions and protocol patterns
jsonmarkdownrustsolidityValidates dimensional consistency and detects dimensional bugs in annotated code
jsonmarkdownsoliditytextAdds dimensional annotations to source code at anchor points using Reserve Protocol's format
solidityScans repo for files with dimensional arithmetic to scope discovery
json"Annotates codebases with dimensional analysis comments documenting units, dimensions, and decimal scaling. Use when someone asks to annotate units in...
jsontext>
bashyara"Identifies dependencies at heightened risk of exploitation or takeover. Use when assessing supply chain attack surface, evaluating dependency health,...
Detects timing side-channels in cryptographic code
Detects timing side-channel vulnerabilities in cryptographic code. Use when implementing or reviewing crypto code, encountering division on secrets, s...
bashctext"Performs ultra-granular per-function deep analysis for security audit context building. Use when analyzing dense functions, data-flow chains, cryptog...
Builds deep architectural context before vulnerability hunting
Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding.
Creates devcontainers with Claude Code, language-specific tooling (Python/Node/Rust/Go), and persistent volumes. Use when adding devcontainer support ...
dockerfilejsonmermaid"Iteratively reviews and fixes Claude Code skill quality issues until they meet standards. Runs automated fix-review cycles using the skill-reviewer a...
textScans Android APKs for Firebase security misconfigurations
Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functio...
bashConfigures Python projects with modern tooling (uv, ruff, ty). Use when creating projects, writing standalone scripts, or migrating from pip/Poetry/my...
bashmakefiletomlProvides expertise for analyzing DWARF debug files and understanding the DWARF debug format/standard (v3-v5). Triggers when understanding DWARF inform...
bash"Generates minimal macOS Seatbelt sandbox configurations. Use when sandboxing, isolating, or restricting macOS applications with allowlist-based profi...
bashscheme
Recent Commits
- 4b9a4e92026-03-27docs(aflpp): add opinionated environment variables guide (#130)Tim Ren
- 9df47312026-03-25add dimensional analysis plugin (#132)Benjamin Samuels
- 5c15f4f2026-03-17Add archetype deep profiles to culture-index skill (#126)Dan Guido
- aab484c2026-03-16Add Codex-native skill installation support (#123)Artem Dinaburg
- b1f2ed92026-03-16Improve skill-improver plugin's ability to locate skill-reviewer (#122)Tannr
- 86559372026-03-16Add some improvements to semgrep-rule-creator (#116)mschwager
- c6097692026-03-04Fix burpsuite-project-parser skill directory structure (#115)Dan Guido
- 00c013d2026-03-04gh-cli: Replace skill with hooks-only enforcement (#114)William Tan
- 19c463e2026-03-03Import fp-check plugin from skills-internal (#113)Dan Guido
- 1a868d22026-02-27second-opinion: use Codex CLI's built-in MCP server (#110)Dan Guido