trailofbits/skills

trailofbits/skills · AGENTS.md

trailofbits/skills · CLAUDE.md

trailofbits/skills · plugins/agentic-actions-auditor/skills/agentic-actions-auditor/SKILL.md · Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action…

trailofbits/skills · plugins/audit-context-building/skills/audit-context-building/SKILL.md · Understand a codebase before looking for bugs in it - what each function assumes, what it guarantees, and what it…

trailofbits/skills · plugins/building-secure-contracts/skills/algorand-vulnerability-scanner/SKILL.md · Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees…

trailofbits/skills · plugins/building-secure-contracts/skills/audit-prep-assistant/SKILL.md · Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis…

trailofbits/skills · plugins/building-secure-contracts/skills/cairo-vulnerability-scanner/SKILL.md · Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2…

trailofbits/skills · plugins/building-secure-contracts/skills/code-maturity-assessor/SKILL.md · Systematic code maturity assessment using Trail of Bits' 9-category framework. Analyzes codebase for arithmetic safety…

trailofbits/skills · plugins/building-secure-contracts/skills/cosmos-vulnerability-scanner/SKILL.md · Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund…

trailofbits/skills · plugins/building-secure-contracts/skills/guidelines-advisor/SKILL.md · Smart contract development advisor based on Trail of Bits' best practices. Analyzes codebase to generate…

trailofbits/skills · plugins/building-secure-contracts/skills/secure-workflow-guide/SKILL.md · Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features…

trailofbits/skills · plugins/building-secure-contracts/skills/solana-vulnerability-scanner/SKILL.md · Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing…

trailofbits/skills · plugins/building-secure-contracts/skills/substrate-vulnerability-scanner/SKILL.md · Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect…

trailofbits/skills · plugins/building-secure-contracts/skills/token-integration-analyzer/SKILL.md · Token integration and implementation analyzer based on Trail of Bits' token integration checklist. Analyzes token…

trailofbits/skills · plugins/building-secure-contracts/skills/ton-vulnerability-scanner/SKILL.md · Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake…

trailofbits/skills · plugins/burpsuite-project-parser/skills/burpsuite-project-parser/SKILL.md · Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or…

trailofbits/skills · plugins/c-review/AGENTS.md

trailofbits/skills · plugins/c-review/skills/c-review/SKILL.md · Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and…

trailofbits/skills · plugins/chrome-mcp-troubleshooting/skills/chrome-mcp-troubleshooting/SKILL.md · Diagnose and fix Claude in Chrome MCP extension connectivity issues. Use when mcp__claude-in-chrome__* tools fail…

trailofbits/skills · plugins/code-improver/skills/code-improver/SKILL.md · Runs an autonomous review-and-fix improvement loop over any code target — a skill, plugin, module, or directory — using…

trailofbits/skills · plugins/code-improver/skills/pr-improver/SKILL.md · Runs an autonomous review-and-fix improvement loop over the current branch's changes until a PR review comes back…

trailofbits/skills · plugins/code-improver/skills/skill-improver/SKILL.md · Runs an autonomous review-and-fix improvement loop over a Claude Code skill until a review comes back clean, with a…

trailofbits/skills · plugins/code-improver/tests/fixtures/pr-review-toolkit/skills/review-pr/SKILL.md · Reviews the current branch's changes against its base branch as a pull request: correctness of new and modified code…

trailofbits/skills · plugins/code-improver/tests/fixtures/review-panel/skills/panel-review/SKILL.md · Reviews a code target by launching a panel of specialist auditor agents and merging their reports. Use when asked to…

trailofbits/skills · plugins/constant-time-analysis/skills/constant-time-analysis/SKILL.md · Detects timing side-channel vulnerabilities in cryptographic code. Use when implementing or reviewing crypto code…