12,426 skills found · Page 99 of 415
trailofbits / burpsuite-project-parserSearches and explores Burp Suite project files (.burp) from the command line
trailofbits / code-improverRuns an autonomous review-and-fix improvement loop over any code target — a skill, plugin, module, or directory — using a reviewer the user names: any installed skill or agent. Keeps a cross-round findings ledger, escalates when fixes stop converging, and guards scope mechanically
trailofbits / pr-improverRuns an autonomous review-and-fix improvement loop over the current branch's changes until a PR review comes back clean, scoped mechanically to the directories the branch touched. Reviews are performed by an installed PR-review skill (default: pr-review-toolkit's review-pr).
trailofbits / skill-improverRuns an autonomous review-and-fix improvement loop over a Claude Code skill until a review comes back clean, with a cross-round findings ledger, escalation when fixes stop converging, and a mechanical scope guard. Reviews are performed by the plugin-dev skill-reviewer agent.
trailofbits / constant-time-analysisDetects timing side-channel vulnerabilities in cryptographic code
trailofbits / entry-point-analyzerAnalyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that modify state, categorizes them by access level (public, admin, role-restricted, contract-only), and generates structured audit reports.
trailofbits / open-sourcingThis skill should be used when the user asks to "open source this project", "prepare this repository for public release", "make this repo public", "check open-source readiness", "choose a license for this project", or "set up release automation" ahead of a public launch.
trailofbits / patching-bugsUse when a known bug or falsifiable bug hypothesis in a local codebase needs a patch commit and reviewable proof report.
trailofbits / slicing-code-contextSelects bounded, graph-informed source slices with Trailmark and delegates focused code analysis or patch-proposal work to a smaller subagent
trailofbits / chrome-mcp-troubleshootingDiagnose and fix Claude in Chrome MCP extension connectivity issues
trailofbits / devcontainer-setupCreates devcontainers with Claude Code, language-specific tooling (Python/Node/Rust/Go), and persistent volumes
trailofbits / modern-pythonConfigures Python projects with modern tooling (uv, ruff, ty)
trailofbits / semgrep-rule-creatorCreates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns
trailofbits / sharp-edgesIdentifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes
trailofbits / cosmos-vulnerability-scannerScans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence. 25 core + 16 IBC + 10 EVM + 3 CosmWasm patterns
trailofbits / let-fate-decideDraws the 12 Houses of the Zodiac Tarot spread to inject entropy into planning when prompts are vague, ambiguous, or casually delegated. Interprets the spread to guide next steps
trailofbits / goal-promptDrafts copy-paste-ready /goal commands for goal mode in Claude Code and Codex
trailofbits / semgrep-rule-variant-creatorCreates language variants of existing Semgrep rules
trailofbits / agentic-actions-auditorAudits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference.
trailofbits / code-maturity-assessorSystematic code maturity assessment using Trail of Bits' 9-category framework. Analyzes codebase for arithmetic safety, auditing practices, access controls, complexity, decentralization, documentation, MEV risks, low-level code, and testing, then produces a scorecard with evidence-based ratings and…
trailofbits / guidelines-advisorSmart contract development advisor based on Trail of Bits' best practices. Analyzes codebase to generate documentation/specifications, review architecture, check upgradeability patterns, assess implementation quality, identify pitfalls, review dependencies, and evaluate testing
trailofbits / secure-workflow-guideGuides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeability/ERC conformance/token integration), generates visual security diagrams, helps document security properties for fuzzing/verification, and reviews manual security areas
trailofbits / fp-checkSystematically verifies suspected security bugs to eliminate false positives, producing a TRUE POSITIVE or FALSE POSITIVE verdict with documented evidence for each
trailofbits / modern-cppGuides C++ code toward modern idioms (C++20/23/26)
trailofbits / mutation-testingConfigures mewt or muton campaigns, analyzes surviving mutants, and investigates bugs exposed by testing gaps
trailofbits / spec-to-code-complianceCheck code against the documentation that specifies it - which requirements hold, which the code contradicts, which are absent, and what the code does that no document mentions
trailofbits / rust-reviewPerforms comprehensive Rust security review for safe/unsafe boundary issues, memory safety in unsafe blocks, concurrency hazards, panic-induced DoS, FFI safety, and async runtime mistakes
trailofbits / interpreting-culture-indexInterprets Culture Index (CI) surveys, behavioral profiles, and personality assessment data. Supports individual profile interpretation, team composition analysis (gas/brake/glue), burnout detection, profile comparison, hiring profiles, manager coaching, interview transcript analysis for trait predi…
trailofbits / supply-chain-risk-auditorAudits a project's dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree, abandoned or archived upstreams, npm publisher concentration, and install-time script execution
trailofbits / review-walkthroughGenerates an interactive HTML walkthrough for reviewing code changes. Use only when explicitly called.
