trailofbits/skills-curated

1

ghidra-headless Reverse engineers binaries using Ghidra's headless analyzer. Use when decompiling executables, extracting functions, …

trailofbits/skills-curated

368

2

humanizer Remove signs of AI-generated writing from text. Use when editing or reviewing text to make it sound more natural and …

trailofbits/skills-curated

160

3

planning-with-files Implements file-based planning for complex multi-step tasks. Creates task_plan.md, findings.md, and progress.md as pe…

trailofbits/skills-curated

122

4

skill-extractor Extracts reusable skills from work sessions. Use when: (1) a non-obvious problem was solved worth preserving, (2) a p…

trailofbits/skills-curated

115

5

security-awareness Teaches agents to recognize and avoid security threats during normal activity. Covers phishing detection, credential …

trailofbits/skills-curated

113

6

openai-develop-web-game Use when the agent is building or iterating on a web game (HTML/JS) and needs a reliable development + testing loop: …

trailofbits/skills-curated

107

7

wooyun-legacy Provides web vulnerability testing methodology distilled from 88,636 real-world cases from the WooYun vulnerability d…

trailofbits/skills-curated

96

8

last30days Researches a topic from the last 30 days on Reddit, X, and the web. Surfaces real community discussions with engageme…

trailofbits/skills-curated

93

9

ffuf-web-fuzzing Expert guidance for ffuf web fuzzing during authorized penetration testing. Covers directory discovery, subdomain enu…

trailofbits/skills-curated

88

10

openai-security-threat-model Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and…

trailofbits/skills-curated

86

11

openai-security-best-practices Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when th…

trailofbits/skills-curated

83

12

scv-scan Audits Solidity codebases for smart contract vulnerabilities using a four-phase workflow (cheatsheet loading, codebas…

trailofbits/skills-curated

83

13

openai-spreadsheet Use when tasks involve creating, editing, analyzing, or formatting spreadsheets (`.xlsx`, `.csv`, `.tsv`) using Pytho…

trailofbits/skills-curated

79

14

openai-screenshot Use when the user explicitly asks for a desktop or system screenshot (full screen, specific app or window, or a pixel…

trailofbits/skills-curated

74

15

react-pdf Generates PDF documents using the React-PDF library (@react-pdf/renderer) with TypeScript and JSX. Use when creating …

trailofbits/skills-curated

73

16

openai-playwright Use when the task requires automating a real browser from the terminal (navigation, form filling, snapshots, screensh…

trailofbits/skills-curated

72

17

openai-pdf Use when tasks involve reading, creating, or reviewing PDF files where rendering and layout matter; prefer visual che…

trailofbits/skills-curated

71

18

openai-security-ownership-map Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-co…

trailofbits/skills-curated

71

19

x-research Searches X/Twitter for real-time perspectives, dev discussions, product feedback, breaking news, and expert opinions …

trailofbits/skills-curated

70

20

openai-jupyter-notebook Use when the user asks to create, scaffold, or edit Jupyter notebooks (`.ipynb`) for experiments, explorations, or tu…

trailofbits/skills-curated

68

21

openai-doc Use when the task involves reading, creating, or editing `.docx` documents, especially when formatting or layout fide…

trailofbits/skills-curated

67

22

openai-gh-address-comments Help address review/issue comments on the open GitHub PR for the current branch using gh CLI; verify gh auth first an…

trailofbits/skills-curated

67

23

openai-gh-fix-ci Use when a user asks to debug or fix failing GitHub PR checks that run in GitHub Actions; use `gh` to inspect checks …

trailofbits/skills-curated

67

24

openai-cloudflare-deploy Deploy applications and infrastructure to Cloudflare using Workers, Pages, and related platform services. Use when th…

trailofbits/skills-curated

66

25

openai-yeet Use only when the user explicitly asks to stage, commit, push, and open a GitHub pull request in one flow using the G…

trailofbits/skills-curated

66

26

openai-netlify-deploy Deploy web projects to Netlify using the Netlify CLI (`npx netlify`). Use when the user asks to deploy, host, publish…

trailofbits/skills-curated

65

27

openai-sentry Use when the user asks to inspect Sentry issues or events, summarize recent production errors, or pull basic Sentry h…

trailofbits/skills-curated

64

28

grilling Interviews the user relentlessly about a plan, decision, or idea until every branch of the decision tree is resolved.…

trailofbits/skills-curated

22

29

handoff Compacts the current conversation into a handoff document so a fresh agent can continue the work in a new session.

trailofbits/skills-curated

15

30

teach Teaches the user a new skill or concept over multiple sessions, using the current directory as a stateful teaching wo…

trailofbits/skills-curated

15

31

writing-great-skills Reference for writing and editing agent skills well — the vocabulary and principles that make a skill predictable. Co…

trailofbits/skills-curated

15