# Trailofbits Skills

> Runs Trail of Bits security audit plugins: constant-time analysis of cryptographic code using Python

Runs Trail of Bits security audit plugins: constant-time analysis of cryptographic code using Python tooling managed by uv, and zeroize audit of Rust code with regression test fixtures, which requires a Rust toolchain. Use when auditing Rust code for secrets that are not zeroized from memory, or when checking cryptographic code for constant-time behavior.

- Page: https://ss33.ai/skills/aaaaqwq/trailofbits-skills-1391339571
- Publisher: aaaaqwq
- Category: [Security](https://ss33.ai/skills/category/security-w9g95g) › [Application security](https://ss33.ai/skills/category/security-w9g95g/application-security-6s8pr9)
- License: MIT
- Source: https://github.com/aaaaqwq/agi-super-team/blob/dff8b4bdbeabb658bad0c4b75d173b60b91bd7ca/skills/trailofbits-skills/SKILL.md

## Skill

SKILL.md: https://ss33.ai/api/v1/ss33/download/aaaaqwq/trailofbits-skills-1391339571

# trailofbits-skills
> Trail of Bits 安全审计——基于 Trail of Bits 开源工具链的安全审计插件

**状态**: 部分实现 — 有安全审计插件

## 已有模块
- `plugins/constant-time-analysis/` — 常量时间分析
- `plugins/zeroize-audit/` — 零化审计（含 Rust 回归测试 fixtures）

## 配置要求
- Rust 工具链（用于 zeroize-audit）
- uv（Python 包管理，用于 constant-time-analysis）

## 相关文件
- `plugins/constant-time-analysis/` — 常量时间分析插件
- `plugins/zeroize-audit/` — 零化审计插件