trailofbits
Showing 61–80 of 80 skills · Page 2 of 2
trailofbits / trailmark-summary
7.2kRuns a Trailmark summary analysis on a codebase. Returns auto-detected languages, entry point count, and dependency list
trailofbits / writing-lean-proofs
7.2kWrites and reviews structured Lean 4 proofs and designs Lean libraries following Mathlib conventions
trailofbits / agentic-actions-auditor
7.2kAudits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference.
trailofbits / code-maturity-assessor
7.2kSystematic code maturity assessment using Trail of Bits' 9-category framework. Analyzes codebase for arithmetic safety, auditing practices, access controls, complexity, decentralization, documentation, MEV risks, low-level code, and testing, then produces a scorecard with evidence-based ratings and…
trailofbits / fp-check
7.2kSystematically verifies suspected security bugs to eliminate false positives, producing a TRUE POSITIVE or FALSE POSITIVE verdict with documented evidence for each
trailofbits / guidelines-advisor
7.2kSmart contract development advisor based on Trail of Bits' best practices. Analyzes codebase to generate documentation/specifications, review architecture, check upgradeability patterns, assess implementation quality, identify pitfalls, review dependencies, and evaluate testing
trailofbits / modern-cpp
7.2kGuides C++ code toward modern idioms (C++20/23/26)
trailofbits / mutation-testing
7.2kConfigures mewt or muton campaigns, analyzes surviving mutants, and investigates bugs exposed by testing gaps
trailofbits / secure-workflow-guide
7.2kGuides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeability/ERC conformance/token integration), generates visual security diagrams, helps document security properties for fuzzing/verification, and reviews manual security areas
trailofbits / spec-to-code-compliance
7.2kCheck code against the documentation that specifies it - which requirements hold, which the code contradicts, which are absent, and what the code does that no document mentions
trailofbits / trailmark-finding-triage
7.2kPerforms graph-assisted triage of a single security finding, SARIF result, weAudit annotation, suspicious function, or report excerpt using Trailmark reachability, entrypoint paths, taint, privilege-boundary, blast-radius, caller/callee, and neighborhood evidence
trailofbits / trailmark-review-gate
7.2kRuns a Trailmark structural review gate over a branch, pull request, fix commit, release diff, or git ref range to detect new entrypoints, new tainted paths, removed validation or authorization calls, privilege-boundary drift, blast-radius growth, complexity growth, and newly reachable sensitive sin…
trailofbits / trailmark-variant-neighborhood
7.2kExpands one confirmed or suspected vulnerability into a Trailmark graph neighborhood of variant candidates by finding sibling functions, shared callers and callees, common sensitive sinks, common entrypoint paths, interface implementations, override relationships, type/reference neighbors, and struc…
trailofbits / rust-review
7.2kPerforms comprehensive Rust security review for safe/unsafe boundary issues, memory safety in unsafe blocks, concurrency hazards, panic-induced DoS, FFI safety, and async runtime mistakes
trailofbits / interpreting-culture-index
7.2kInterprets Culture Index (CI) surveys, behavioral profiles, and personality assessment data. Supports individual profile interpretation, team composition analysis (gas/brake/glue), burnout detection, profile comparison, hiring profiles, manager coaching, interview transcript analysis for trait predi…
trailofbits / supply-chain-risk-auditor
7.2kAudits a project's dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree, abandoned or archived upstreams, npm publisher concentration, and install-time script execution
trailofbits / review-walkthrough
7.2kGenerates an interactive HTML walkthrough for reviewing code changes. Use only when explicitly called.
trailofbits / audit-context-building
7.2kUnderstand a codebase before looking for bugs in it - what each function assumes, what it guarantees, and what it depends on elsewhere
trailofbits / property-based-testing
7.2kWrites, reviews, and debugs property-based tests — Hypothesis, fast-check, proptest, jqwik, rapid, and Echidna or Medusa for Solidity invariants
trailofbits / variant-analysis
7.2kHunts for the other instances of a bug already found — the variants of one root cause across a codebase. Use immediately after a vulnerability, logic bug, or bad pattern turns up in a specific file and the question becomes where else it occurs, including the bare conversational form ("are there othe…