crypto-protocol-diagram SKILL.md skillA

crypto-protocol-diagram from trailofbits/skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add trailofbits/skills/crypto-protocol-diagram@git:20260331.6b79b5e

Pins git:20260331.6b79b5e in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
trailofbits/skills
Path
plugins/trailmark/skills/crypto-protocol-diagram/SKILL.md
Versions recorded
1
Latest version
git:20260331.6b79b5e, committed Mar 31, 2026
Size
18,848 bytes
Repository stars
8,043
License
CC-BY-SA-4.0

Extracts protocol message flow from source code, RFCs, academic papers, pseudocode, informal prose, ProVerif (.pv), or Tamarin (.spthy) models and generates Mermaid sequenceDiagrams with cryptographic annotations. Use when diagramming a crypto protocol, visualizing a handshake or key exchange flow, extracting message flow from a spec or RFC, diagramming a ProVerif or Tamarin model, or drawing sequence diagrams for TLS, Noise, Signal, X3DH, Double Ratchet, FROST, DH, or ECDH protocols.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Crypto Protocol Diagram

Produces a Mermaid `sequenceDiagram` (written to file) and an ASCII sequence
diagram (printed inline) from either:

- **Source code** implementing a cryptographic protocol, or
- **A specification** — RFC, academic paper, pseudocode, informal prose,
  ProVerif (`.pv`), or Tamarin (`.spthy`) model.

**Tools used:** Read, Write, Grep, Glob, Bash, WebFetch (for URL specs).

Unlike the `diagramming-code` skill (which visualizes code structure), this skill
extracts **protocol semantics**: who sends what to whom, what cryptographic
transformations occur at each step, and what protocol phases exist.

For call graphs, class hierarchies, or module dependency maps, use the
`diagramming-code` skill instead.

## When to Use

- User asks to diagram, visualize, or extract a cryptographic protocol
- Input is source code implementing a handshake, key exchange, or multi-party protocol
- Input is an RFC, academic paper, pseudocode, or formal model (ProVerif/Tamarin)
- User names a specific protocol (TLS, Noise, Signal, X3DH, FROST)

## When NOT to Use

- User wants a call graph, class hierarchy, or module dependency map — use `diagramming-code`
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add trailofbits/skills/crypto-protocol-diagram@sha256:11e665a8180bfc5d

The line at the top of this page pins the label git:20260331.6b79b5e, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_ibwesb7aypu6wof2.svg)](https://markdownregistry.com/a/art_ibwesb7aypu6wof2)

4 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Mar 31, 2026.

versioncommittedcommitsizeaudit
git:20260331.6b79b5e latest2026-03-31 6b79b5e 18,848 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (18848 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

trailofbits/skills · 8,043 stars · license CC-BY-SA-4.0 · pushed 2026-11-06 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_ibwesb7aypu6wof2
GET https://markdownregistry.com/api/v1/resolve?ref=trailofbits/skills/crypto-protocol-diagram
GET https://markdownregistry.com/api/v1/blob/11e665a8180bfc5dcac16cb4baa01100f83d6875b2d38dcd54ad6866f9b04dbc

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from trailofbits/skills

AGENTS.md AGENTS.md file
trailofbits/skills · AGENTS.md
git:20260916.123037e · audit B · 8,043 stars
CLAUDE.md CLAUDE.md file
trailofbits/skills · CLAUDE.md
git:20260605.f09e5c7 · audit B · 8,043 stars
agentic-actions-auditor SKILL.md skill
trailofbits/skills · plugins/agentic-actions-auditor/skills/agentic-actions-auditor/SKILL.md · Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action…
git:20260831.9645e2f · audit A · 8,043 stars
audit-context-building SKILL.md skill
trailofbits/skills · plugins/audit-context-building/skills/audit-context-building/SKILL.md · Understand a codebase before looking for bugs in it - what each function assumes, what it guarantees, and what it…
git:20260828.d1f1575 · audit A · 8,043 stars
algorand-vulnerability-scanner SKILL.md skill
trailofbits/skills · plugins/building-secure-contracts/skills/algorand-vulnerability-scanner/SKILL.md · Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees…
git:20260831.6feac67 · audit A · 8,043 stars
audit-prep-assistant SKILL.md skill
trailofbits/skills · plugins/building-secure-contracts/skills/audit-prep-assistant/SKILL.md · Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis…
git:20260825.32ad9e6 · audit A · 8,043 stars
cairo-vulnerability-scanner SKILL.md skill
trailofbits/skills · plugins/building-secure-contracts/skills/cairo-vulnerability-scanner/SKILL.md · Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2…
git:20260831.6feac67 · audit A · 8,043 stars
code-maturity-assessor SKILL.md skill
trailofbits/skills · plugins/building-secure-contracts/skills/code-maturity-assessor/SKILL.md · Systematic code maturity assessment using Trail of Bits' 9-category framework. Analyzes codebase for arithmetic safety…
git:20260825.32ad9e6 · audit A · 8,043 stars
cosmos-vulnerability-scanner SKILL.md skill
trailofbits/skills · plugins/building-secure-contracts/skills/cosmos-vulnerability-scanner/SKILL.md · Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund…
git:20260401.d7f76b5 · audit A · 8,043 stars
guidelines-advisor SKILL.md skill
trailofbits/skills · plugins/building-secure-contracts/skills/guidelines-advisor/SKILL.md · Smart contract development advisor based on Trail of Bits' best practices. Analyzes codebase to generate…
git:20260825.32ad9e6 · audit A · 8,043 stars
secure-workflow-guide SKILL.md skill
trailofbits/skills · plugins/building-secure-contracts/skills/secure-workflow-guide/SKILL.md · Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features…
git:20260825.32ad9e6 · audit A · 8,043 stars
solana-vulnerability-scanner SKILL.md skill
trailofbits/skills · plugins/building-secure-contracts/skills/solana-vulnerability-scanner/SKILL.md · Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing…
git:20260831.6feac67 · audit A · 8,043 stars

Every file in trailofbits/skills

Other files named crypto-protocol-diagram

crypto-protocol-diagram SKILL.md skill
outlinedriven/outline-driven-development · .devin/skills/crypto-protocol-diagram/SKILL.md · Use when asked for a sequence diagram of cryptographic protocol semantics from code, prose, RFCs, papers, ProVerif, or…
git:20260912.07a8a1b · audit A · 55 stars

Browse by kind, by grade A, or by owner.