Skip to content

skills

by trailofbits

Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

About

Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

6,192
Stars
222
Skill Files
540
Forks
122
PRs Merged
36
Contributors
18
Issues Open
16
Issues Closed
2026-06-30
Last Activity

Skill Analysis

147
Avg Lines / Skill
845
Avg Words / Skill
1078
Code Blocks
1004
Total Files
4.98 MB
Repo Size
162
Reference Files
Skill lines14 min / 62 median / 796 max
Code languagesbash, c, cmake, conf, cpp, dockerfile, func, go, javascript, json, makefile, markdown, mermaid, php, powershell, proverif, python, ruby, rust, scheme, sh, solidity, text, toml, typescript, yaml, yara
Frontmatter keysallowed-tools, argument-hint, color, consolidated, covers, description, disable-model-invocation, gate, kind, model, name, tools, type
Has CLAUDE.mdYes
Has LicenseYes
File typesmd (634), yaml (84), svg (74), json (56), py (54), sh (28), bats (10), toml (9), yml (5), yar (5)

Skills (248)

  • semgrep-scanner
    91 lines386 words3 blocks

    "Executes Semgrep CLI scans for a specific language category and produces SARIF output. Spawned by the semgrep skill as a parallel worker — one agent ...

    bash
  • codeql
    270 lines2061 words8 blocks

    >-

    bash
  • semgrep
    205 lines1372 words5 blocks

    >-

    bash
  • sarif-parsing
    480 lines1650 words15 blocks

    >-

    bashpythonyaml
  • trailofbits:entry-points
    15 lines50 words

    Identifies state-changing entry points in smart contracts

  • entry-point-analyzer
    248 lines1265 words3 blocks

    Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify sta...

    bashmarkdown
  • agentic-actions-auditor
    324 lines2928 words2 blocks

    "Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and Git...

  • yara-rule-authoring
    646 lines3690 words18 blocks

    >

    bashyara
  • dimension-discoverer
    257 lines1214 words8 blocks

    Discovers dimensional vocabulary for codebases by analyzing naming conventions and protocol patterns

    jsonmarkdownrustsolidity
  • dimension-validator
    422 lines1549 words19 blocks

    Validates dimensional consistency and detects dimensional bugs in annotated code

    jsonmarkdownsoliditytext
  • arithmetic-scanner
    268 lines1632 words3 blocks

    Scans repo for files with dimensional arithmetic to scope discovery

    json
  • dimension-annotator
    303 lines1286 words11 blocks

    Adds dimensional annotations to source code at anchor points using Reserve Protocol's format

    solidity
  • dimension-propagator
    219 lines1405 words4 blocks

    Propagates dimensional annotations through arithmetic and call chains, reporting mismatches found during propagation

    solidity
  • dimensional-analysis
    267 lines2404 words2 blocks

    "Annotates codebases with dimensional analysis comments documenting units, dimensions, and decimal scaling. Use when someone asks to annotate units in...

    jsontext
  • trailofbits:diff-review
    17 lines59 words

    Performs security-focused differential review of code changes

  • adversarial-modeler
    174 lines790 words3 blocks

    "Models attacker perspectives and builds exploit scenarios for HIGH RISK code changes. Use when differential review identifies high-risk changes that ...

    markdown
  • differential-review
    229 lines1035 words5 blocks

    >

  • skill-improver
    147 lines893 words4 blocks

    "Iteratively reviews and fixes Claude Code skill quality issues until they meet standards. Runs automated fix-review cycles using the skill-reviewer a...

    text
  • modern-python
    334 lines1431 words11 blocks

    Configures Python projects with modern tooling (uv, ruff, ty). Use when creating projects, writing standalone scripts, or migrating from pip/Poetry/my...

    bashmakefiletoml
  • trailofbits:variants
    19 lines71 words

    Finds similar vulnerabilities using pattern-based analysis

Recent Commits

-322 contributions across all repos
JunJulAugSepOctNovDecJanFebMarAprMayJun
Less
More
  • cfe5d7b2026-06-30
    Rust review plugin (#178)
    Andrea Cappa (zi0Black)
  • 39e10bd2026-06-24
    build(deps): Bump actions/checkout from 6.0.3 to 7.0.0 in the all group (#191)
    dependabot[bot]
  • ff4162d2026-06-22
    Update fp-check with links and best practices update (#189)
    Jay Little
  • c070b9b2026-06-10
    fix(fp-check): use correct JSON response format in stop hooks (#129)
    jonnydevs
  • 64a8c3f2026-06-10
    Update second-opinion Codex model to gpt-5.5 (#163)
    Matthew Kern
  • 55771192026-06-10
    fix(semgrep-rule-creator): correct 404ing semgrep-docs links (#179)
    Jamie Reid
  • c910ecf2026-06-10
    Bump actions/checkout from 6.0.2 to 6.0.3 in the all group (#182)
    dependabot[bot]
  • d5fe2e62026-06-05
    feat(codex): add UI metadata for skills (#175)
    Lixin2026
  • f09e5c72026-06-05
    Remove legacy codex compatiblity scripts/shims. (#173)
    William Tan
  • c94841b2026-05-27
    Fix for when CLAUDE_PLUGIN_ROOT contains spaces (#169)
    Tim Lander