Universal Skills

This skill should be used when the user asks to "open source this project", "prepare this repository for public release", "make this repo public", "check open-source readiness", "choose a license for this project", or "set up release automation" ahead of a public launch.

skilldocumentationautomation

trailofbits / patching-bugs

Use when a known bug or falsifiable bug hypothesis in a local codebase needs a patch commit and reviewable proof report.

skillreview

trailofbits / modern-python

Configures Python projects with modern tooling (uv, ruff, ty)

skilldevelopmenttesting+3

trailofbits / semgrep-rule-creator

Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns

skilltestingsecurity

trailofbits / sharp-edges

Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes

skillapidesign+2

trailofbits / cosmos-vulnerability-scanner

Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence. 25 core + 16 IBC + 10 EVM + 3 CosmWasm patterns

skillsecurityreview

trailofbits / let-fate-decide

Draws the 12 Houses of the Zodiac Tarot spread to inject entropy into planning when prompts are vague, ambiguous, or casually delegated. Interprets the spread to guide next steps

skillaws

trailofbits / semgrep-rule-variant-creator

Creates language variants of existing Semgrep rules

trailofbits / code-maturity-assessor

Systematic code maturity assessment using Trail of Bits' 9-category framework. Analyzes codebase for arithmetic safety, auditing practices, access controls, complexity, decentralization, documentation, MEV risks, low-level code, and testing, then produces a scorecard with evidence-based ratings and…

skilltestingdocumentation

trailofbits / guidelines-advisor

Smart contract development advisor based on Trail of Bits' best practices. Analyzes codebase to generate documentation/specifications, review architecture, check upgradeability patterns, assess implementation quality, identify pitfalls, review dependencies, and evaluate testing

skilldevelopmenttesting+3

trailofbits / secure-workflow-guide

Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeability/ERC conformance/token integration), generates visual security diagrams, helps document security properties for fuzzing/verification, and reviews manual security areas

skilldevelopmentsecurity+1

trailofbits / fp-check

Systematically verifies suspected security bugs to eliminate false positives, producing a TRUE POSITIVE or FALSE POSITIVE verdict with documented evidence for each

skillsecurity

trailofbits / modern-cpp

Guides C++ code toward modern idioms (C++20/23/26)

skillsecurity

trailofbits / mutation-testing

Configures mewt or muton campaigns, analyzes surviving mutants, and investigates bugs exposed by testing gaps

skilltestingsql+1

trailofbits / spec-to-code-compliance

Check code against the documentation that specifies it - which requirements hold, which the code contradicts, which are absent, and what the code does that no document mentions

skilldesigndocumentation

trailofbits / rust-review

Performs comprehensive Rust security review for safe/unsafe boundary issues, memory safety in unsafe blocks, concurrency hazards, panic-induced DoS, FFI safety, and async runtime mistakes

skillsecurityreview+1

trailofbits / interpreting-culture-index

Interprets Culture Index (CI) surveys, behavioral profiles, and personality assessment data. Supports individual profile interpretation, team composition analysis (gas/brake/glue), burnout detection, profile comparison, hiring profiles, manager coaching, interview transcript analysis for trait predi…

skillpdf

trailofbits / supply-chain-risk-auditor

Audits a project's dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree, abandoned or archived upstreams, npm publisher concentration, and install-time script execution

skillreview

trailofbits / audit-context-building

Understand a codebase before looking for bugs in it - what each function assumes, what it guarantees, and what it depends on elsewhere

skillreview

trailofbits / implement-patch

Use when a confirmed local bug needs an invariant-level fix, variant search, tests, and one local commit.

trailofbits / reproduce-bug

Use when a named runtime or compiler bug in a local repository needs independent reproduction.

trailofbits / property-based-testing

Writes, reviews, and debugs property-based tests — Hypothesis, fast-check, proptest, jqwik, rapid, and Echidna or Medusa for Solidity invariants

skilltestingapi+1

anbeime / atutun-xhs-cover

阿囤囤风格小红书封面提示词生成。用于AI工具、效率方法、产品测评、教程部署、个人经验、播客推荐、职场认知类内容的爆款竖版封面设计。特点是真人出镜、超大柔和浅黄（#FDFFA7）/白色中文标题、粗黑描边、人物抠图描边、绿色勾选清单、emoji贴纸、箭头标注、高对比高密度构图。关键词：小红书封面、爆款封面、阿囤囤风格、AI教程封面、产品测评封面、封面提示词。