published by trailofbits

50 listings on this page, in order of arrival. Each one has its own page with README, repository facts and source links.

1. address-sanitizer ★ 6,975
   Builds and runs code under AddressSanitizer to catch buffer overflows, use-after-free, and other memory errors during fuzzing or tests. Cove
2. aflpp ★ 6,975
   Sets up and runs AFL++ for multi-core fuzzing of C/C++ projects built with afl-clang-fast or afl-gcc-fast. Covers instrumentation modes, par
3. agentic-actions-auditor ★ 6,975
   Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex
4. algorand-vulnerability-scanner ★ 6,975
   Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validatio
5. atheris ★ 6,975
   Sets up and runs Atheris, the coverage-guided Python fuzzer built on libFuzzer. Covers TestOneInput harnesses, FuzzedDataProvider, instrumen
6. audit-augmentation ★ 6,975
   Augments Trailmark code graphs with external audit findings from SARIF static analysis results, weAudit annotation files, and version-gated
7. audit-context-building ★ 6,975
   Understand a codebase before looking for bugs in it - what each function assumes, what it guarantees, and what it depends on elsewhere. Use
8. audit-prep-assistant ★ 6,975
   Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tools, increases test co
9. burpsuite-project-parser ★ 6,975
   Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bodies with regex patte
10. c-review ★ 6,975
    Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilitie
11. cairo-vulnerability-scanner ★ 6,975
    Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address c
12. cargo-fuzz ★ 6,975
    Sets up and runs cargo-fuzz, the standard fuzzing tool for Cargo-based Rust projects. Covers cargo fuzz init, the nightly toolchain requirem
13. chrome-mcp-troubleshooting ★ 6,975
    Diagnose and fix Claude in Chrome MCP extension connectivity issues. Use when mcp__claude-in-chrome__* tools fail, return "Browser extension
14. code-improver ★ 6,975
    Runs an autonomous review-and-fix improvement loop over any code target — a skill, plugin, module, or directory — using a reviewer the user
15. code-maturity-assessor ★ 6,975
    Systematic code maturity assessment using Trail of Bits' 9-category framework. Analyzes codebase for arithmetic safety, auditing practices,
16. codeql ★ 6,975
    Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql"
17. constant-time-analysis ★ 6,975
    Detects timing side-channel vulnerabilities in cryptographic code. Use when implementing or reviewing crypto code, encountering division on
18. constant-time-testing ★ 6,975
    Measures timing side channels in cryptographic implementations by running them, using dudect for statistical analysis and Timecop over Valgr
19. cosmos-vulnerability-scanner ★ 6,975
    Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence
20. coverage-analysis ★ 6,975
    Measures and interprets what a fuzzing campaign actually reaches, using llvm-cov, lcov, or a fuzzer's own coverage output. Covers baselining
21. crypto-protocol-diagram ★ 6,975
    Extracts protocol message flow from source code, RFCs, academic papers, pseudocode, informal prose, ProVerif (.pv), or Tamarin (.spthy) mode
22. devcontainer-setup ★ 6,975
    Creates devcontainers with Claude Code, language-specific tooling (Python/Node/Rust/Go), and persistent volumes. Use when adding devcontaine
23. diagramming-code ★ 6,975
    Generates Mermaid diagrams from Trailmark code graphs. Produces call graphs, class hierarchies, module dependency maps, containment diagrams
24. differential-review ★ 6,975
    Performs security-focused differential review of code changes. Adapts analysis depth to codebase size, uses git blame for context, calculate
25. dimensional-analysis ★ 6,975
    Annotates codebases with dimensional analysis comments documenting units, dimensions, and decimal scaling. Use when someone asks to annotate
26. dwarf-expert ★ 6,975
    Analyzes DWARF debug information in compiled binaries. Use when inspecting .debug_* sections, DIE trees, or DW_TAG_/DW_AT_ entries with dwar
27. entry-point-analyzer ★ 6,975
    Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally callable functions that
28. firebase-apk-scanner ★ 6,975
    Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed clo
29. fp-check ★ 6,975
    Systematically verifies suspected security bugs to eliminate false positives, producing a TRUE POSITIVE or FALSE POSITIVE verdict with docum
30. fuzzing-dictionary ★ 6,975
    Builds and applies fuzzing dictionaries so a fuzzer can produce the keywords, magic bytes, and tokens a target expects. Covers extracting to
31. fuzzing-obstacles ★ 6,975
    Patches past the barriers that stop a fuzzer making progress — checksum and hash verification, magic-value validation, time-based seeds, and
32. genotoxic ★ 6,975
    Graph-informed mutation testing triage. Parses codebases with Trailmark, runs mutation testing and necessist, then uses survived mutants, un
33. gh-cli ★ 6,975
    Enforces authenticated gh CLI workflows over unauthenticated curl, WebFetch, and MCP fetch patterns. Use when working with GitHub URLs, API
34. github-triage ★ 6,975
    Triages a repository's open GitHub issues and pull requests via the gh CLI. Optionally reviews and merges ready PRs — incrementally merging
35. goal-prompt ★ 6,975
    Drafts copy-paste-ready /goal commands for goal mode in Claude Code and Codex. Use when the user asks to create, write, rewrite, improve, co
36. graph-evolution ★ 6,975
    Compares Trailmark code graphs at two source code snapshots (git commits, tags, or directories) to surface security-relevant structural chan
37. guidelines-advisor ★ 6,975
    Smart contract development advisor based on Trail of Bits' best practices. Analyzes codebase to generate documentation/specifications, revie
38. harness-writing ★ 6,975
    Designs and improves fuzzing harnesses for C/C++ and Rust. Covers mapping raw bytes onto a target API, generating structured inputs, avoidin
39. interpreting-culture-index ★ 6,975
    Interprets Culture Index (CI) surveys, behavioral profiles, and personality assessment data. Supports individual profile interpretation, tea
40. let-fate-decide ★ 6,975
    Draws the 12 Houses of the Zodiac Tarot spread to inject entropy into planning when prompts are vague, ambiguous, or casually delegated. Int
41. libafl ★ 6,975
    Builds custom fuzzers with LibAFL, the modular Rust fuzzing library. Covers composing observers, feedbacks, mutators, schedulers, and execut
42. libfuzzer ★ 6,975
    Sets up and runs libFuzzer, the coverage-guided fuzzer built into LLVM, on C/C++ code that compiles with Clang. Covers harness structure, -f
43. mermaid-to-proverif ★ 6,975
    Translates Mermaid sequenceDiagrams describing cryptographic protocols into ProVerif formal verification models (.pv files). Use when genera
44. modern-cpp ★ 6,975
    Guides C++ code toward modern idioms (C++20/23/26). Use when writing new C++ code, modernizing legacy patterns, or working on security-criti
45. modern-python ★ 6,975
    Configures Python projects with modern tooling (uv, ruff, ty). Use when creating projects, writing standalone scripts, or migrating from pip
46. mutation-testing ★ 6,975
    Configures mewt or muton mutation testing campaigns — scopes targets, tunes timeouts, and optimizes long-running runs. Use when the user men
47. open-sourcing ★ 6,975
    This skill should be used when the user asks to "open source this project", "prepare this repository for public release", "make this repo pu
48. ossfuzz ★ 6,975
    Enrolls a project in OSS-Fuzz, Google's free continuous fuzzing service for open source, and drives it locally. Covers project.yaml, Dockerf
49. panel-review ★ 6,975
    Reviews a code target by launching a panel of specialist auditor agents and merging their reports. Use when asked to run a panel review.
50. pr-improver ★ 6,975
    Runs an autonomous review-and-fix improvement loop over the current branch's changes until a PR review comes back clean, scoped mechanically