This file is byte-identical to the first copy the registry indexed, one of 385 indexed copies. Same content hash, so the same checks give both the same grade.
CLAUDE.md from trailofbits/skills is a CLAUDE.md file: the standing instructions Claude Code reads in that repo.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
The line at the top of this page pins the label git:20260605.f09e5c7, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
The registry has recorded 5 versions of this file, between Feb 13, 2026 and Jun 5, 2026, about one every 28 days. Its first recorded version is graded A and its latest B.
GET https://markdownregistry.com/api/v1/artifacts/art_53hann7r3jqevxew
GET https://markdownregistry.com/api/v1/resolve?ref=trailofbits/skills/CLAUDE.md
GET https://markdownregistry.com/api/v1/blob/336cc4fbf19beaada7ccf9986414fa91851a8d7a07dfb3ccbe800a69eed0ab49
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
trailofbits/skills · plugins/agentic-actions-auditor/skills/agentic-actions-auditor/SKILL.md · Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action…
trailofbits/skills · plugins/audit-context-building/skills/audit-context-building/SKILL.md · Understand a codebase before looking for bugs in it - what each function assumes, what it guarantees, and what it…
trailofbits/skills · plugins/building-secure-contracts/skills/guidelines-advisor/SKILL.md · Smart contract development advisor based on Trail of Bits' best practices. Analyzes codebase to generate…
trailofbits/skills · plugins/building-secure-contracts/skills/secure-workflow-guide/SKILL.md · Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features…
