SkillsAdd

trailofbits/skills

vulnerability-triage-brocards

This skill should be used when the user asks to "triage a vulnerability report", "assess a CVE", "evaluate a bug bounty submission", "decide if a finding is…

Trending #6291 First seen Jul 30, 2026

Installation

$ npx skills add https://github.com/trailofbits/skills
View on skills.sh ↗ GitHub repository ↗

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

vulnerability-scanner Similar name
sickn33/agentic-awesome-skills

Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface m…

1.2K installs
vulnerability-scanning Similar name
aj-geddes/useful-ai-prompts

Automated vulnerability detection using OWASP tools, CVE databases, and security scanners. Use …

587 installs
vulnerability-scanning Similar name
secondsky/claude-skills

Automated security scanning for dependencies, code, containers with Trivy, Snyk, npm audit. Use…

457 installs
vulnerability-scanner Similar name
davila7/claude-code-templates

Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface m…

401 installs
performing-web-application-vulnerability-triage Similar name
mukul975/anthropic-cybersecurity-skills

Triages web application vulnerability findings from DAST/SAST scanners such as Burp Suite and Z…

361 installs
testing-api-for-mass-assignment-vulnerability Similar name
mukul975/anthropic-cybersecurity-skills

Tests APIs for mass assignment (auto-binding), OWASP API3:2023, by identifying writable endpoin…

330 installs

Also in this package

Other skills from trailofbits/skills · top by installs.

npx skills add https://github.com/trailofbits/skills
semgrep 7.9K modern-python 7.4K codeql 7.1K ask-questions-if-underspecified 6.9K supply-chain-risk-auditor 6.6K insecure-defaults 6.5K secure-workflow-guide 6.5K differential-review 6.4K code-maturity-assessor 6.3K fp-check 5.9K

Browse all from trailofbits/skills

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 7.0K
License LICENSE
Default branch main
Open issues 22
Status Active

History

  1. First seen on skills.sh
  2. First recorded snapshot · 621 installs