skills
starsforks
How to install skills?
trailofbits/skills
$git clone https://github.com/trailofbits/skillsTrail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
README.md
| 1 | # Trail of Bits Skills Marketplace |
| 2 | |
| 3 | A Claude Code plugin marketplace from Trail of Bits providing skills to enhance AI-assisted security analysis, testing, and development workflows. Codex can load this marketplace through its Claude marketplace compatibility. |
| 4 | |
| 5 | > Also see: [claude-code-config](https://github.com/trailofbits/claude-code-config) · [skills-curated](https://github.com/trailofbits/skills-curated) · [claude-code-devcontainer](https://github.com/trailofbits/claude-code-devcontainer) · [dropkit](https://github.com/trailofbits/dropkit) |
| 6 | |
| 7 | ## Installation |
| 8 | |
| 9 | ### Claude Code Marketplace |
| 10 | |
| 11 | ``` |
| 12 | /plugin marketplace add trailofbits/skills |
| 13 | ``` |
| 14 | |
| 15 | ### Browse and Install Plugins |
| 16 | |
| 17 | ``` |
| 18 | /plugin menu |
| 19 | ``` |
| 20 | |
| 21 | ### Codex |
| 22 | |
| 23 | Codex supports Claude plugin marketplaces directly, so this repository does not need Codex-specific sidecar metadata. |
| 24 | |
| 25 | Install the marketplace with: |
| 26 | |
| 27 | ```sh |
| 28 | codex plugin marketplace add trailofbits/skills |
| 29 | codex plugin list |
| 30 | codex plugin add <plugin-name>@trailofbits |
| 31 | ``` |
| 32 | |
| 33 | ### Local Development |
| 34 | |
| 35 | To add the marketplace locally (e.g., for testing or development), navigate to the **parent directory** of this repository: |
| 36 | |
| 37 | ``` |
| 38 | cd /path/to/parent # e.g., if repo is at ~/projects/skills, be in ~/projects |
| 39 | /plugins marketplace add ./skills |
| 40 | ``` |
| 41 | |
| 42 | ## Available Plugins |
| 43 | |
| 44 | ### Smart Contract Security |
| 45 | |
| 46 | | Plugin | Description | |
| 47 | |--------|-------------| |
| 48 | | [building-secure-contracts](plugins/building-secure-contracts/) | Smart contract security toolkit with vulnerability scanners for 6 blockchains | |
| 49 | | [entry-point-analyzer](plugins/entry-point-analyzer/) | Identify state-changing entry points in smart contracts for security auditing | |
| 50 | |
| 51 | ### Code Auditing |
| 52 | |
| 53 | | Plugin | Description | |
| 54 | |--------|-------------| |
| 55 | | [agentic-actions-auditor](plugins/agentic-actions-auditor/) | Audit GitHub Actions workflows for AI agent security vulnerabilities | |
| 56 | | [audit-context-building](plugins/audit-context-building/) | Build deep architectural context through ultra-granular code analysis | |
| 57 | | [burpsuite-project-parser](plugins/burpsuite-project-parser/) | Search and extract data from Burp Suite project files | |
| 58 | | [c-review](plugins/c-review/) | Comprehensive C/C++ security review with clustered parallel workers and SARIF output | |
| 59 | | [differential-review](plugins/differential-review/) | Security-focused differential review of code changes with git history analysis | |
| 60 | | [dimensional-analysis](plugins/dimensional-analysis/) | Annotate codebases with dimensional analysis comments to detect unit mismatches and formula bugs | |
| 61 | | [fp-check](plugins/fp-check/) | Systematic false positive verification for security bug analysis with mandatory gate reviews | |
| 62 | | [insecure-defaults](plugins/insecure-defaults/) | Detect insecure default configurations, hardcoded credentials, and fail-open security patterns | |
| 63 | | [rust-review](plugins/rust-review/) | Comprehensive Rust security review covering safe/unsafe boundary, memory safety, concurrency, panic-DoS, FFI, and async runtime with SARIF output | |
| 64 | | [semgrep-rule-creator](plugins/semgrep-rule-creator/) | Create and refine Semgrep rules for custom vulnerability detection | |
| 65 | | [semgrep-rule-variant-creator](plugins/semgrep-rule-variant-creator/) | Port existing Semgrep rules to new target languages with test-driven validation | |
| 66 | | [sharp-edges](plugins/sharp-edges/) | Identify error-prone APIs, dangerous configurations, and footgun designs | |
| 67 | | [static-analysis](plugins/static-analysis/) | Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing | |
| 68 | | [supply-chain-risk-auditor](plugins/supply-chain-risk-auditor/) | Audit supply-chain threat landscape of project dependencies | |
| 69 | | [testing-handbook-skills](plugins/testing-handbook-skills/) | Skills from the [Testing Handbook](https://appsec.guide): fuzzers, static analysis, sanitizers, coverage | |
| 70 | | [trailmark](plugins/trailmark/) | Code graph analysis, Mermaid diagrams, mutation testing triage, and protocol verification | |
| 71 | | [variant-analysis](plugins/variant-analysis/) | Find similar vulnerabilities across codebases using pattern-based analysis | |
| 72 | |
| 73 | ### Malware Analysis |
| 74 | |
| 75 | | Plugin | Description | |
| 76 | |--------|-------------| |
| 77 | | [yara-authoring](plugins/yara-authoring/) | YARA detection rule authoring with linting, atom analysis, and best practices | |
| 78 | |
| 79 | ### Verification |
| 80 | |
| 81 | | Plugin | Description | |
| 82 | |--------|-------------| |
| 83 | | [constant-time-analysis](plugins/constant-time-analysis/) | Detect compiler-induced timing side-channels in cryptographic code | |
| 84 | | [mutation-testing](plugins/mutation-testing/) | Configure mewt/muton mutation testing campaigns — scope targets, tune timeouts, optimize long runs | |
| 85 | | [property-based-testing](plugins/property-based-testing/) | Property-based testing guidance for multiple languages and smart contracts | |
| 86 | | [spec-to-code-compliance](plugins/spec-to-code-compliance/) | Specification-to-code compliance checker for blockchain audits | |
| 87 | | [zeroize-audit](plugins/zeroize-audit/) | Detect missing or compiler-eliminated zeroization of secrets in C/C++ and Rust | |
| 88 | |
| 89 | ### Re |
People who liked this also viewed
6 picksType
- guardiansan implementation of the ideas in Erik Meijer's "Guardians of the Agents: Formal Verification of AI Workflows" (Communications of the ACM, January 2026)WorkflowsJul 2026
- wardgateSecurity gateway for AI agents - credential-isolated API proxying and policy-gated remote execution (conclaves). Reduce the blast radius!WorkflowsMar 2026
- ai-security-arsenalA collection of skills, agents, commands, and workflows for security researchers. Compatible with Claude Code, Claude Desktop, OpenCode, and other AI coding tools.WorkflowsApr 2026
- ReArk鸿蒙 HarmonyOS NEXT APP/HAP/ABC 专业逆向工具，支持反汇编、反编译、交叉引用、Agent智能分析、签名识别、包体浏览、真机连接等功能。WorkflowsJul 2026
- prowler-studioProwler Studio an AI workflow that ensures Claude Code follows Prowler's guardrails to deliver consistent, tested, and PR-ready threat detection checks, remediations and update compliance frameworks.WorkflowsJul 2026
- circuit-breakerRuntime economic governance for AI agents. Circuit Breaker adds risk-managed execution, cost ceilings, and kill switches to autonomous AI workflows.WorkflowsJun 2026
