skills
by trailofbits
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
About
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
Skill Analysis
Skills (248)
"Executes Semgrep CLI scans for a specific language category and produces SARIF output. Spawned by the semgrep skill as a parallel worker — one agent ...
bash>-
bash>-
bash>-
bashpythonyamlIdentifies state-changing entry points in smart contracts
Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify sta...
bashmarkdown"Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and Git...
>
bashyaraDiscovers dimensional vocabulary for codebases by analyzing naming conventions and protocol patterns
jsonmarkdownrustsolidityValidates dimensional consistency and detects dimensional bugs in annotated code
jsonmarkdownsoliditytextScans repo for files with dimensional arithmetic to scope discovery
jsonAdds dimensional annotations to source code at anchor points using Reserve Protocol's format
solidityPropagates dimensional annotations through arithmetic and call chains, reporting mismatches found during propagation
solidity"Annotates codebases with dimensional analysis comments documenting units, dimensions, and decimal scaling. Use when someone asks to annotate units in...
jsontextPerforms security-focused differential review of code changes
"Models attacker perspectives and builds exploit scenarios for HIGH RISK code changes. Use when differential review identifies high-risk changes that ...
markdown>
"Iteratively reviews and fixes Claude Code skill quality issues until they meet standards. Runs automated fix-review cycles using the skill-reviewer a...
textConfigures Python projects with modern tooling (uv, ruff, ty). Use when creating projects, writing standalone scripts, or migrating from pip/Poetry/my...
bashmakefiletomlFinds similar vulnerabilities using pattern-based analysis
Recent Commits
- cfe5d7b2026-06-30Rust review plugin (#178)Andrea Cappa (zi0Black)
- 39e10bd2026-06-24build(deps): Bump actions/checkout from 6.0.3 to 7.0.0 in the all group (#191)dependabot[bot]
- ff4162d2026-06-22Update fp-check with links and best practices update (#189)Jay Little
- c070b9b2026-06-10fix(fp-check): use correct JSON response format in stop hooks (#129)jonnydevs
- 64a8c3f2026-06-10Update second-opinion Codex model to gpt-5.5 (#163)Matthew Kern
- 55771192026-06-10fix(semgrep-rule-creator): correct 404ing semgrep-docs links (#179)Jamie Reid
- c910ecf2026-06-10Bump actions/checkout from 6.0.2 to 6.0.3 in the all group (#182)dependabot[bot]
- d5fe2e62026-06-05feat(codex): add UI metadata for skills (#175)Lixin2026
- f09e5c72026-06-05Remove legacy codex compatiblity scripts/shims. (#173)William Tan
- c94841b2026-05-27Fix for when CLAUDE_PLUGIN_ROOT contains spaces (#169)Tim Lander