SkillsAdd

trailofbits/skills

insecure-defaults

Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing…

All-time #2291 First seen Jan 28, 2026
8-week activity · all time api

Installation

$ npx skills add https://github.com/trailofbits/skills
View on skills.sh ↗ GitHub repository ↗

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

deserialization-insecure Similar name
yaklang/hack-skills

>- Insecure deserialization playbook. Use when Java, PHP, or Python applications deserialize un…

2.9K installs
insecure-source-code-management Similar name
yaklang/hack-skills

>- Source control and artifact exposure (.git, .svn, .hg, backups, .env). Use when recon finds …

2.9K installs
upload-insecure-files Similar name
yaklang/hack-skills

Insecure file upload playbook. Use when testing upload validation, storage paths, processing pi…

2.8K installs

Also in this package

Other skills from trailofbits/skills · top by installs.

npx skills add https://github.com/trailofbits/skills
semgrep 7.9K modern-python 7.4K codeql 7.1K ask-questions-if-underspecified 6.9K supply-chain-risk-auditor 6.6K secure-workflow-guide 6.5K differential-review 6.4K code-maturity-assessor 6.3K fp-check 5.9K agentic-actions-auditor 5.8K

Browse all from trailofbits/skills

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 7.0K
License LICENSE
Default branch main
Open issues 22
Status Active

History

  1. First seen on skills.sh
  2. First recorded snapshot · 6,512 installs