Audit reports, papers, talks, podcasts, and policy comments from Trail of Bits.https://trailofbits.com/https://github.com/trailofbits/skills/tree/main/plugins/devcontainer-setup/skills/devcontainer-setuphttps://github.com/trailofbits/skills/tree/main/plugins/devcontainer-setup/skills/devcontainer-setupCreates devcontainers with Claude Code, language-specific tooling (Python/Node/Rust/Go), and persistent volumes.Thu, 15 Oct 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/entry-point-analyzer/skills/entry-point-analyzerhttps://github.com/trailofbits/skills/tree/main/plugins/entry-point-analyzer/skills/entry-point-analyzerAnalyzes smart contract codebases to identify state-changing entry points for security auditing.Thu, 15 Oct 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/slicing-code-contexthttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/slicing-code-contextSelects bounded, graph-informed source slices with Trailmark and delegates focused code analysis or patch-proposal work to a smaller subagent.Thu, 15 Oct 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/diagramming-codehttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/diagramming-codeGenerates Mermaid diagrams from Trailmark code graphs.Wed, 14 Oct 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/dimensional-analysis/skills/dimensional-analysishttps://github.com/trailofbits/skills/tree/main/plugins/dimensional-analysis/skills/dimensional-analysisAudits code for unit and decimal-scaling bugs and annotates it with dimensional comments recording the units of each value.Wed, 14 Oct 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/firebase-apk-scanner/skills/firebase-apk-scannerhttps://github.com/trailofbits/skills/tree/main/plugins/firebase-apk-scanner/skills/firebase-apk-scannerScans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed cloud functions.Wed, 14 Oct 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/mermaid-to-proverifhttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/mermaid-to-proverifTranslates Mermaid sequenceDiagrams describing cryptographic protocols into ProVerif formal verification models (.pv files).Wed, 14 Oct 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/trailmarkhttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/trailmarkBuilds and queries multi-language source and binary code graphs for security analysis.Wed, 14 Oct 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/trailmark-finding-triagehttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/trailmark-finding-triagePerforms graph-assisted triage of a single security finding, SARIF result, weAudit annotation, suspicious function, or report excerpt using Trailmark reachability, entrypoint paths, taint, privilege-boundary, blast-radius, caller/callee, and neighborhood evidence.Wed, 14 Oct 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/yara-authoring/skills/yara-rule-authoringhttps://github.com/trailofbits/skills/tree/main/plugins/yara-authoring/skills/yara-rule-authoringGuides authoring of high-quality YARA-X detection rules for malware identification.Wed, 14 Oct 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/zeroize-audit/skills/zeroize-audithttps://github.com/trailofbits/skills/tree/main/plugins/zeroize-audit/skills/zeroize-auditDetects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizations, with assembly-level analysis, and control-flow verification.Wed, 14 Oct 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/let-fate-decide/skills/let-fate-decidehttps://github.com/trailofbits/skills/tree/main/plugins/let-fate-decide/skills/let-fate-decideDraws the 12 Houses of the Zodiac Tarot spread to inject entropy into planning when prompts are vague, ambiguous, or casually delegated.Tue, 13 Oct 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/chrome-mcp-troubleshooting/skills/chrome-mcp-troubleshootinghttps://github.com/trailofbits/skills/tree/main/plugins/chrome-mcp-troubleshooting/skills/chrome-mcp-troubleshootingDiagnose and fix Claude in Chrome MCP extension connectivity issues.Fri, 09 Oct 2026 00:00:00 GMTClaude Code skillhttps://trailofbits.com/library/sigstore-rust/https://trailofbits.com/library/sigstore-rust/Security Reviews > Technology Product ReviewsThu, 01 Oct 2026 00:00:00 GMTSecurity reviewSupply Chainhttps://github.com/trailofbits/skills/tree/main/plugins/culture-index/skills/interpreting-culture-indexhttps://github.com/trailofbits/skills/tree/main/plugins/culture-index/skills/interpreting-culture-indexInterprets Culture Index (CI) surveys, behavioral profiles, and personality assessment data.Mon, 28 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/static-analysis/skills/semgrephttps://github.com/trailofbits/skills/tree/main/plugins/static-analysis/skills/semgrepRuns a Semgrep security scan over a codebase: detects languages, selects rulesets, presents the plan for explicit approval, then runs every approved ruleset through scripts/run-scans.sh, which batches the semgrep processes and writes scans.json, and merges the output to SARIF.Mon, 28 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/address-sanitizerhttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/address-sanitizerBuilds and runs code under AddressSanitizer to catch buffer overflows, use-after-free, and other memory errors during fuzzing or tests.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/aflpphttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/aflppSets up and runs AFL++ for multi-core fuzzing of C/C++ projects built with afl-clang-fast or afl-gcc-fast.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/agentic-actions-auditor/skills/agentic-actions-auditorhttps://github.com/trailofbits/skills/tree/main/plugins/agentic-actions-auditor/skills/agentic-actions-auditorAudits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/algorand-vulnerability-scannerhttps://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/algorand-vulnerability-scannerScans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access control issues.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/atherishttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/atherisSets up and runs Atheris, the coverage-guided Python fuzzer built on libFuzzer.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/audit-augmentationhttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/audit-augmentationAugments Trailmark code graphs with external audit findings from SARIF static analysis results, weAudit annotation files, and version-gated Trailmark 0.4.x binary-analysis graph exports.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/audit-context-building/skills/audit-context-buildinghttps://github.com/trailofbits/skills/tree/main/plugins/audit-context-building/skills/audit-context-buildingUnderstand a codebase before looking for bugs in it - what each function assumes, what it guarantees, and what it depends on elsewhere.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/audit-prep-assistanthttps://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/audit-prep-assistantPrepares codebases for security review using Trail of Bits' checklist.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/burpsuite-project-parser/skills/burpsuite-project-parserhttps://github.com/trailofbits/skills/tree/main/plugins/burpsuite-project-parser/skills/burpsuite-project-parserSearches and explores Burp Suite project files (.burp) from the command line.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/cairo-vulnerability-scannerhttps://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/cairo-vulnerability-scannerScans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address conversion problems, and signature replay.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/cargo-fuzzhttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/cargo-fuzzSets up and runs cargo-fuzz, the standard fuzzing tool for Cargo-based Rust projects.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/code-maturity-assessorhttps://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/code-maturity-assessorSystematic code maturity assessment using Trail of Bits' 9-category framework.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/static-analysis/skills/codeqlhttps://github.com/trailofbits/skills/tree/main/plugins/static-analysis/skills/codeqlScans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/constant-time-analysis/skills/constant-time-analysishttps://github.com/trailofbits/skills/tree/main/plugins/constant-time-analysis/skills/constant-time-analysisDetects timing side-channel vulnerabilities in cryptographic code.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/constant-time-testinghttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/constant-time-testingMeasures timing side channels in cryptographic implementations by running them, using dudect for statistical analysis and Timecop over Valgrind for dynamic tracing.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/cosmos-vulnerability-scannerhttps://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/cosmos-vulnerability-scannerScans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/coverage-analysishttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/coverage-analysisMeasures and interprets what a fuzzing campaign actually reaches, using llvm-cov, lcov, or a fuzzer's own coverage output.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/crypto-protocol-diagramhttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/crypto-protocol-diagramExtracts protocol message flow from source code, RFCs, academic papers, pseudocode, informal prose, ProVerif (.pv), or Tamarin (.spthy) models and generates Mermaid sequenceDiagrams with cryptographic annotations.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/differential-review/skills/differential-reviewhttps://github.com/trailofbits/skills/tree/main/plugins/differential-review/skills/differential-reviewPerforms security-focused differential review of code changes.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/dwarf-expert/skills/dwarf-experthttps://github.com/trailofbits/skills/tree/main/plugins/dwarf-expert/skills/dwarf-expertAnalyzes DWARF debug information in compiled binaries.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/fp-check/skills/fp-checkhttps://github.com/trailofbits/skills/tree/main/plugins/fp-check/skills/fp-checkSystematically verifies suspected security bugs to eliminate false positives, producing a TRUE POSITIVE or FALSE POSITIVE verdict with documented evidence for each.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/fuzzing-dictionaryhttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/fuzzing-dictionaryBuilds and applies fuzzing dictionaries so a fuzzer can produce the keywords, magic bytes, and tokens a target expects.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/fuzzing-obstacleshttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/fuzzing-obstaclesPatches past the barriers that stop a fuzzer making progress — checksum and hash verification, magic-value validation, time-based seeds, and other non-deterministic global state.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/genotoxichttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/genotoxicGraph-informed mutation testing triage.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/gh-cli/skills/gh-clihttps://github.com/trailofbits/skills/tree/main/plugins/gh-cli/skills/gh-cliEnforces authenticated gh CLI workflows over unauthenticated curl, WebFetch, and MCP fetch patterns.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/github-triage/skills/github-triagehttps://github.com/trailofbits/skills/tree/main/plugins/github-triage/skills/github-triageTriages a repository's open GitHub issues and pull requests via the gh CLI.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/graph-evolutionhttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/graph-evolutionCompares Trailmark code graphs at two source code snapshots (git commits, tags, or directories) to surface security-relevant structural changes.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/guidelines-advisorhttps://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/guidelines-advisorSmart contract development advisor based on Trail of Bits' best practices.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/harness-writinghttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/harness-writingDesigns and improves fuzzing harnesses for C/C++ and Rust.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/libaflhttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/libaflBuilds custom fuzzers with LibAFL, the modular Rust fuzzing library.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/libfuzzerhttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/libfuzzerSets up and runs libFuzzer, the coverage-guided fuzzer built into LLVM, on C/C++ code that compiles with Clang.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/modern-python/skills/modern-pythonhttps://github.com/trailofbits/skills/tree/main/plugins/modern-python/skills/modern-pythonConfigures Python projects with modern tooling (uv, ruff, ty).Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/mutation-testing/skills/mutation-testinghttps://github.com/trailofbits/skills/tree/main/plugins/mutation-testing/skills/mutation-testingConfigures mewt or muton campaigns, analyzes surviving mutants, and investigates bugs exposed by testing gaps.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/ossfuzzhttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/ossfuzzEnrolls a project in OSS-Fuzz, Google's free continuous fuzzing service for open source, and drives it locally.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/property-based-testing/skills/property-based-testinghttps://github.com/trailofbits/skills/tree/main/plugins/property-based-testing/skills/property-based-testingWrites, reviews, and debugs property-based tests — Hypothesis, fast-check, proptest, jqwik, rapid, and Echidna or Medusa for Solidity invariants.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/ruzzyhttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/ruzzySets up and runs Ruzzy, Trail of Bits' coverage-guided Ruby fuzzer and the only production-ready one for the language.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/static-analysis/skills/sarif-parsinghttps://github.com/trailofbits/skills/tree/main/plugins/static-analysis/skills/sarif-parsingParses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other scanners.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/second-opinion/skills/second-opinionhttps://github.com/trailofbits/skills/tree/main/plugins/second-opinion/skills/second-opinionGets independent code reviews from Codex or Antigravity for uncommitted changes, branch diffs, and commits.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/secure-workflow-guidehttps://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/secure-workflow-guideGuides through Trail of Bits' 5-step secure development workflow.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/semgrep-rule-creator/skills/semgrep-rule-creatorhttps://github.com/trailofbits/skills/tree/main/plugins/semgrep-rule-creator/skills/semgrep-rule-creatorCreates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/semgrep-rule-variant-creator/skills/semgrep-rule-variant-creatorhttps://github.com/trailofbits/skills/tree/main/plugins/semgrep-rule-variant-creator/skills/semgrep-rule-variant-creatorCreates language variants of existing Semgrep rules.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/sharp-edges/skills/sharp-edgeshttps://github.com/trailofbits/skills/tree/main/plugins/sharp-edges/skills/sharp-edgesIdentifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/solana-vulnerability-scannerhttps://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/solana-vulnerability-scannerScans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ownership checks, and sysvar spoofing.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/spec-to-code-compliance/skills/spec-to-code-compliancehttps://github.com/trailofbits/skills/tree/main/plugins/spec-to-code-compliance/skills/spec-to-code-complianceCheck code against the documentation that specifies it - which requirements hold, which the code contradicts, which are absent, and what the code does that no document mentions.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/substrate-vulnerability-scannerhttps://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/substrate-vulnerability-scannerScans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin checks.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditorhttps://github.com/trailofbits/skills/tree/main/plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditorAudits a project's dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree, abandoned or archived upstreams, npm publisher concentration, and install-time script execution.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/testing-handbook-generatorhttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/testing-handbook-generatorGenerates Claude Code skills from the Trail of Bits Testing Handbook (appsec.guide), analyzing handbook pages and emitting SKILL.md files with the structure each skill type requires.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/token-integration-analyzerhttps://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/token-integration-analyzerToken integration and implementation analyzer based on Trail of Bits' token integration checklist.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/ton-vulnerability-scannerhttps://github.com/trailofbits/skills/tree/main/plugins/building-secure-contracts/skills/ton-vulnerability-scannerScans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Jetton contracts, and forward TON without gas checks.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/trailmark-review-gatehttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/trailmark-review-gateRuns a Trailmark structural review gate over a branch, pull request, fix commit, release diff, or git ref range to detect new entrypoints, new tainted paths, removed validation or authorization calls, privilege-boundary drift, blast-radius growth, complexity growth, and newly reachable sensitive sinks.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/trailmark-structuralhttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/trailmark-structuralRuns full Trailmark structural analysis by building a graph, running preanalysis(), and reporting hotspots, taint, blast radius, privilege boundaries, attack surface, and version-gated Trailmark 0.4+/0.5+ data such as proxy counts, subgraph edges, type/reference summaries, and entrypoint attributes.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/trailmark-summaryhttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/trailmark-summaryRuns a Trailmark summary analysis on a codebase.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/trailmark-variant-neighborhoodhttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/trailmark-variant-neighborhoodExpands one confirmed or suspected vulnerability into a Trailmark graph neighborhood of variant candidates by finding sibling functions, shared callers and callees, common sensitive sinks, common entrypoint paths, interface implementations, override relationships, type/reference neighbors, and structurally similar nodes.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/variant-analysis/skills/variant-analysishttps://github.com/trailofbits/skills/tree/main/plugins/variant-analysis/skills/variant-analysisHunts for the other instances of a bug already found — the variants of one root cause across a codebase.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/vector-forgehttps://github.com/trailofbits/skills/tree/main/plugins/trailmark/skills/vector-forgeMutation-driven test vector generation.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/wycheproofhttps://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills/skills/wycheproofValidates cryptographic implementations against Project Wycheproof's test vectors, which encode known attacks and edge cases across AES, RSA, ECDSA, ECDH, and more.Wed, 16 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/post-patch-validation/skills/post-patch-validationhttps://github.com/trailofbits/skills/tree/main/plugins/post-patch-validation/skills/post-patch-validationValidates security patches with reproducible baseline-versus-patched evidence, including original exploits, root-cause variants, behavior preservation, regressions, and newly introduced security failures.Mon, 14 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/review-walkthrough/skills/review-walkthroughhttps://github.com/trailofbits/skills/tree/main/plugins/review-walkthrough/skills/review-walkthroughGenerates an interactive HTML walkthrough for reviewing code changes.Mon, 14 Sep 2026 00:00:00 GMTClaude Code skillhttps://trailofbits.com/library/openai-openclaw/https://trailofbits.com/library/openai-openclaw/Security Reviews > AI/ML ReviewsTue, 01 Sep 2026 00:00:00 GMTSecurity reviewAI/MLhttps://trailofbits.com/library/yon-labs-white-paper/https://trailofbits.com/library/yon-labs-white-paper/Security Reviews > Blockchain Reviews > Other/Multi-ChainTue, 01 Sep 2026 00:00:00 GMTSecurity reviewBlockchainhttps://trailofbits.com/library/google-private-ai-compute-secure-server-side-memory/https://trailofbits.com/library/google-private-ai-compute-secure-server-side-memory/Security Reviews > AI/ML ReviewsTue, 01 Sep 2026 00:00:00 GMTSecurity reviewAI/MLhttps://trailofbits.com/library/amazon-bee-private-compute/https://trailofbits.com/library/amazon-bee-private-compute/Security Reviews > Technology Product ReviewsTue, 01 Sep 2026 00:00:00 GMTSecurity reviewAppSechttps://trailofbits.com/library/offchain-labs-osp-soundness-guard/https://trailofbits.com/library/offchain-labs-osp-soundness-guard/Security Reviews > Major Clients > Offchain LabsTue, 01 Sep 2026 00:00:00 GMTSecurity reviewBlockchainhttps://trailofbits.com/library/gensyn-token-minting-cap/https://trailofbits.com/library/gensyn-token-minting-cap/Security Reviews > Blockchain Reviews > Ethereum/EVMTue, 01 Sep 2026 00:00:00 GMTSecurity reviewBlockchainhttps://trailofbits.com/library/gensyn-delphi-lmsr-markets-with-automated-settlement/https://trailofbits.com/library/gensyn-delphi-lmsr-markets-with-automated-settlement/Security Reviews > Blockchain Reviews > Ethereum/EVMTue, 01 Sep 2026 00:00:00 GMTSecurity reviewBlockchainhttps://github.com/trailofbits/skills/tree/main/plugins/vulnerability-triage-brocards/skills/vulnerability-triage-brocardshttps://github.com/trailofbits/skills/tree/main/plugins/vulnerability-triage-brocards/skills/vulnerability-triage-brocardsApplies 7 brocards (rules of thumb) to systematically accept, dismiss, or request more information on vulnerability reports, or needs to filter raw findings from agentic vulnerability discovery pipelines before human review.Tue, 01 Sep 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/c-review/skills/c-reviewhttps://github.com/trailofbits/skills/tree/main/plugins/c-review/skills/c-reviewPerforms comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities.Mon, 24 Aug 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/code-improver/skills/code-improverhttps://github.com/trailofbits/skills/tree/main/plugins/code-improver/skills/code-improverRuns an autonomous review-and-fix improvement loop over any code target — a skill, plugin, module, or directory — using a reviewer the user names: any installed skill or agent.Mon, 24 Aug 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/code-improver/skills/pr-improverhttps://github.com/trailofbits/skills/tree/main/plugins/code-improver/skills/pr-improverRuns an autonomous review-and-fix improvement loop over the current branch's changes until a PR review comes back clean, scoped mechanically to the directories the branch touched.Mon, 24 Aug 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/code-improver/skills/skill-improverhttps://github.com/trailofbits/skills/tree/main/plugins/code-improver/skills/skill-improverRuns an autonomous review-and-fix improvement loop over a Claude Code skill until a review comes back clean, with a cross-round findings ledger, escalation when fixes stop converging, and a mechanical scope guard.Mon, 24 Aug 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/modern-cpp/skills/modern-cpphttps://github.com/trailofbits/skills/tree/main/plugins/modern-cpp/skills/modern-cppGuides C++ code toward modern idioms (C++20/23/26).Fri, 21 Aug 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/goal-prompt/skills/goal-prompthttps://github.com/trailofbits/skills/tree/main/plugins/goal-prompt/skills/goal-promptDrafts copy-paste-ready /goal commands for goal mode in Claude Code and Codex.Wed, 19 Aug 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/rust-review/skills/rust-reviewhttps://github.com/trailofbits/skills/tree/main/plugins/rust-review/skills/rust-reviewPerforms comprehensive Rust security review for safe/unsafe boundary issues, memory safety in unsafe blocks, concurrency hazards, panic-induced DoS, FFI safety, and async runtime mistakes.Wed, 19 Aug 2026 00:00:00 GMTClaude Code skillhttps://github.com/trailofbits/skills/tree/main/plugins/writing-lean-proofs/skills/writing-lean-proofshttps://github.com/trailofbits/skills/tree/main/plugins/writing-lean-proofs/skills/writing-lean-proofsWrites and reviews structured Lean 4 proofs and designs Lean libraries following Mathlib conventions.Fri, 07 Aug 2026 00:00:00 GMTClaude Code skillhttps://trailofbits.com/library/offchain-labs-arbitrum-chains-genesis-file-generator-2026/https://trailofbits.com/library/offchain-labs-arbitrum-chains-genesis-file-generator-2026/Security Reviews > Major Clients > Offchain LabsSat, 01 Aug 2026 00:00:00 GMTSecurity reviewBlockchainhttps://trailofbits.com/library/offchain-labs-tip-collection-toggler/https://trailofbits.com/library/offchain-labs-tip-collection-toggler/Security Reviews > Major Clients > Offchain LabsSat, 01 Aug 2026 00:00:00 GMTSecurity reviewBlockchainhttps://trailofbits.com/library/offchain-labs-yield-bearing-bridge/https://trailofbits.com/library/offchain-labs-yield-bearing-bridge/Security Reviews > Major Clients > Offchain LabsSat, 01 Aug 2026 00:00:00 GMTSecurity reviewBlockchainhttps://trailofbits.com/library/wikimedia-foundation-oathauth-mediawiki-module/https://trailofbits.com/library/wikimedia-foundation-oathauth-mediawiki-module/Security Reviews > Technology Product ReviewsSat, 01 Aug 2026 00:00:00 GMTSecurity reviewAppSechttps://trailofbits.com/library/cnear/https://trailofbits.com/library/cnear/Security Reviews > Blockchain Reviews > Other/Multi-ChainSat, 01 Aug 2026 00:00:00 GMTSecurity reviewBlockchainhttps://github.com/trailofbits/skills/tree/main/plugins/open-sourcing/skills/open-sourcinghttps://github.com/trailofbits/skills/tree/main/plugins/open-sourcing/skills/open-sourcingProvides a release-readiness workflow covering secrets hygiene, licensing, documentation, CI, and language-specific packaging.Wed, 29 Jul 2026 00:00:00 GMTClaude Code skillhttps://trailofbits.com/library/offchain-labs-3-2-0-upgrade-action-contract/https://trailofbits.com/library/offchain-labs-3-2-0-upgrade-action-contract/Security Reviews > Major Clients > Offchain LabsWed, 01 Jul 2026 00:00:00 GMTSecurity reviewBlockchainhttps://trailofbits.com/library/offchain-labs-sequencer-feed-ticketing/https://trailofbits.com/library/offchain-labs-sequencer-feed-ticketing/Security Reviews > Major Clients > Offchain LabsWed, 01 Jul 2026 00:00:00 GMTSecurity reviewBlockchainhttps://trailofbits.com/library/offchain-labs-arbitrum-arbos-60-61/https://trailofbits.com/library/offchain-labs-arbitrum-arbos-60-61/Security Reviews > Major Clients > Offchain LabsWed, 01 Jul 2026 00:00:00 GMTSecurity reviewBlockchainhttps://trailofbits.com/library/magic-grants-monero-fcmp-crypto/https://trailofbits.com/library/magic-grants-monero-fcmp-crypto/Security Reviews > Cryptography ReviewsWed, 01 Jul 2026 00:00:00 GMTSecurity reviewCrypto