Source

trailofbits/skills

93 skills · 393.1K combined installs

Skills from this source

#

Skill

Source

8W Activity

Installs

ruzzy Sets up and runs Ruzzy, Trail of Bits' coverage-guided Ruby fuzzer and the only production-ready one for the language…

trailofbits/skills

yara-rule-authoring Guides authoring of high-quality YARA-X detection rules for malware identification. Use when writing, reviewing, or o…

trailofbits/skills

burpsuite-project-parser Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or …

trailofbits/skills

skill-improver Runs an autonomous review-and-fix improvement loop over a Claude Code skill until a review comes back clean, with a c…

trailofbits/skills

zeroize-audit Detects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizat…

trailofbits/skills

let-fate-decide Draws the 12 Houses of the Zodiac Tarot spread to inject entropy into planning when prompts are vague, ambiguous, or …

trailofbits/skills

mutation-testing Configures mewt or muton mutation testing campaigns — scopes targets, tunes timeouts, and optimizes long-running runs…

trailofbits/skills

git-cleanup Safely analyzes and cleans up local git branches and worktrees by categorizing them as merged, squash-merged, superse…

trailofbits/skills

dimensional-analysis Annotates codebases with dimensional analysis comments documenting units, dimensions, and decimal scaling. Use when s…

trailofbits/skills

diagramming-code Generates Mermaid diagrams from Trailmark code graphs. Produces call graphs, class hierarchies, module dependency map…

trailofbits/skills

trailmark Builds and queries multi-language source and binary code graphs for security analysis. Includes pre-analysis passes f…

trailofbits/skills

audit-augmentation Augments Trailmark code graphs with external audit findings from SARIF static analysis results, weAudit annotation fi…

trailofbits/skills

crypto-protocol-diagram Extracts protocol message flow from source code, RFCs, academic papers, pseudocode, informal prose, ProVerif (.pv), o…

trailofbits/skills

trailmark-summary trailmark-summary Installation Command Prompt $ npx skills add https://github.com/trailofbits/skills --skill trailmar…

trailofbits/skills

trailmark-structural Runs full Trailmark structural analysis by building a graph, running `preanalysis()`, and reporting hotspots, taint, …

trailofbits/skills

graph-evolution Compares Trailmark code graphs at two source code snapshots (git commits, tags, or directories) to surface security-r…

trailofbits/skills

mermaid-to-proverif Translates Mermaid sequenceDiagrams describing cryptographic protocols into ProVerif formal verification models (.pv …

trailofbits/skills

genotoxic Graph-informed mutation testing triage. Parses codebases with Trailmark, runs mutation testing and necessist, then us…

trailofbits/skills

vector-forge Mutation-driven test vector generation. Finds implementations of a cryptographic algorithm or protocol, runs mutation…

trailofbits/skills

debug-buttercup Debugs the Buttercup CRS (Cyber Reasoning System) running on Kubernetes. Use when diagnosing pod crashes, restart loo…

trailofbits/skills

designing-workflow-skills Guides the design and structuring of workflow-based Claude Code skills with multi-step phases, decision trees, subage…

trailofbits/skills

c-review Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-…

trailofbits/skills

seatbelt-sandboxer Generates minimal macOS Seatbelt sandbox configurations. Use when sandboxing, isolating, or restricting macOS applica…

trailofbits/skills

claude-in-chrome-troubleshooting Diagnose and fix Claude in Chrome MCP extension connectivity issues. Use when mcp__claude-in-chrome__* tools fail, re…

trailofbits/skills

chrome-mcp-troubleshooting Diagnose and fix Claude in Chrome MCP extension connectivity issues. Use when mcp__claude-in-chrome__* tools fail, re…

trailofbits/skills

rust-review Performs comprehensive Rust security review for safe/unsafe boundary issues, memory safety in unsafe blocks, concurre…

trailofbits/skills

vulnerability-triage-brocards This skill should be used when the user asks to "triage a vulnerability report", "assess a CVE", "evaluate a bug boun…

trailofbits/skills

open-sourcing This skill should be used when the user asks to "open source this project", "prepare this repository for public relea…

trailofbits/skills

github-triage Triages a repository's open GitHub issues and pull requests via the gh CLI. Optionally reviews and merges ready PRs —…

trailofbits/skills

slicing-code-context Selects bounded, graph-informed source slices with Trailmark and delegates focused code analysis or patch-proposal wo…

trailofbits/skills

trailmark-finding-triage Performs graph-assisted triage of a single security finding, SARIF result, weAudit annotation, suspicious function, o…

trailofbits/skills

trailmark-variant-neighborhood Expands one confirmed or suspected vulnerability into a Trailmark graph neighborhood of variant candidates by finding…

trailofbits/skills

trailmark-review-gate Runs a Trailmark structural review gate over a branch, pull request, fix commit, release diff, or git ref range to de…

trailofbits/skills

writing-lean-proofs Writes and reviews structured Lean 4 proofs and designs Lean libraries following Mathlib conventions. Use when provin…

trailofbits/skills

fix-review Verifies that git commits address security audit findings without introducing bugs. This skill should be used when th…

trailofbits/skills

goal-prompt Drafts copy-paste-ready /goal commands for goal mode in Claude Code and Codex. Use when the user asks to create, writ…

trailofbits/skills

modern-cpp Guides C++ code toward modern idioms (C++20/23/26). Use when writing new C++ code, modernizing legacy patterns, or wo…

trailofbits/skills

code-improver Runs an autonomous review-and-fix improvement loop over any code target — a skill, plugin, module, or directory — usi…

trailofbits/skills

pr-improver Runs an autonomous review-and-fix improvement loop over the current branch's changes until a PR review comes back cle…

trailofbits/skills

using-gh-cli Guides usage of the GitHub CLI (gh) for interacting with GitHub repositories, PRs, issues, and API. Use when working …

trailofbits/skills

burp-suite Burp Suite Professional is an HTTP interception proxy with numerous security testing features. Use when testing web a…

trailofbits/skills

post-patch-validation Validates security patches with reproducible baseline-versus-patched evidence, including original exploits, root-caus…

trailofbits/skills

review-walkthrough Generates an interactive HTML walkthrough for reviewing code changes. Use only when explicitly called.

trailofbits/skills