ls-trail-of-bits v1.0A

Immutable. This exact content never changes and is served at /api/v1/blob/bc313ccfa6e75643.

---
name: ls-trail-of-bits
description: Attribution-preserving wrapper for Trail of Bits security skills. Use
  when evaluating security review, audit, fuzzing, and vulnerability-analysis workflows.
metadata:
  version: '1.0'
extensions:
  external_skill:
    source_kind: wrapper
    source_url: https://github.com/trailofbits/skills
    source_path: <repository inventory>
    source_commit: cfe5d7b1619e47fb5b38b7e2561dad7e5f1e89af
    source_ref: main
    source_sha256: 6867b487caf10c73043a264b4bcc035f7fd943085b50545c7c0b0c996ad7fe57
    license: CC-BY-SA
    import_date: '2026-07-03'
    vetting_status: provenance-recorded-no-bundled-tooling-executed
---

# Trail Of Bits Security Skills

Use this skill when working on Trail of Bits security skills tasks.

## Workflow

- Do not copy CC-BY-SA upstream content into Localsetup skills without preserving attribution and share-alike obligations.
- Use the upstream bundle as a source map for security workflow gaps and route actual implementation through native skills when possible.
- Security tasks require explicit scope, authorization, and non-destructive validation boundaries.

## Boundaries

- Inspect the target repository before making changes.
- Prefer existing project patterns, declared package managers, and documented validation commands.
- Do not expose secrets, credentials, private user data, or production account identifiers in source, examples, or logs.
- When external APIs or current vendor behavior matter, verify against official docs before implementation.


## Upstream Coverage

See [upstream coverage](./references/upstream-coverage.md) for the compact inventory captured during this import wave.

## Provenance

- Source: `https://github.com/trailofbits/skills`
- Ref: `main` at `cfe5d7b1619e47fb5b38b7e2561dad7e5f1e89af`
- Source path: `<repository inventory>`
- License classification: `CC-BY-SA`
- Source SHA-256: `6867b487caf10c73043a264b4bcc035f7fd943085b50545c7c0b0c996ad7fe57`