More code: binary lifters @lifting-bits, blockchain @crytic, forks @trail-of-forks
Trail of Bits offers skills that help an AI agent verify suspected security bugs, scan Solana and Anchor programs for missing signer and PDA checks, validate cryptographic code against Wycheproof test vectors, and audit C, C++ and Rust code for memory corruption and zeroization gaps. The author's catalog also covers property-based testing across several languages and Solidity invariants, along with structural diffing of code graphs between commits.
Skills
85 skills · 8,046 stars · CC-BY-SA-4.0
Address Sanitizer Builds and runs code under AddressSanitizer to catch buffer overflows, use-after-free, and other…
Aflpp Sets up and runs AFL++ for multi-core fuzzing of C/C++ projects built with afl-clang-fast or afl-…
Agentic Actions Auditor Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including C…
Algorand Vulnerability Scanner Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecke…
Atheris Sets up and runs Atheris, the coverage-guided Python fuzzer built on libFuzzer.
Audit Augmentation Augments Trailmark code graphs with external audit findings from SARIF static analysis results, w…
Audit Context Building Understand a codebase before looking for bugs in it - what each function assumes, what it guarant…
Audit Prep Assistant Prepares codebases for security review using Trail of Bits' checklist.
Burpsuite Project Parser Searches and explores Burp Suite project files (.burp) from the command line.
C Review Performs comprehensive C/C++ security review for memory corruption, integer overflows, race condi…
Cairo Vulnerability Scanner Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic…
Cargo Fuzz Sets up and runs cargo-fuzz, the standard fuzzing tool for Cargo-based Rust projects.
Chrome Mcp Troubleshooting Diagnose and fix Claude in Chrome MCP extension connectivity issues.
Code Improver Runs an autonomous review-and-fix improvement loop over any code target — a skill, plugin, module…
Code Maturity Assessor Systematic code maturity assessment using Trail of Bits' 9-category framework.
Codeql Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint…
Constant Time Analysis Detects timing side-channel vulnerabilities in cryptographic code.
Constant Time Testing Measures timing side channels in cryptographic implementations by running them, using dudect for…
Cosmos Vulnerability Scanner Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities…
Coverage Analysis Measures and interprets what a fuzzing campaign actually reaches, using llvm-cov, lcov, or a fuzz…
Crypto Protocol Diagram Extracts protocol message flow from source code, RFCs, academic papers, pseudocode, informal pros…
Devcontainer Setup Creates devcontainers with Claude Code, language-specific tooling (Python/Node/Rust/Go), and pers…
Diagramming Code Generates Mermaid diagrams from Trailmark code graphs.
Differential Review Performs security-focused differential review of code changes.
Dimensional Analysis Audits code for unit and decimal-scaling bugs and annotates it with dimensional comments recordin…
Dwarf Expert Analyzes DWARF debug information in compiled binaries.
Entry Point Analyzer Analyzes smart contract codebases to identify state-changing entry points for security auditing.
Firebase Apk Scanner Scans Android APKs for Firebase security misconfigurations including open databases, storage buck…
Fp Check Systematically verifies suspected security bugs to eliminate false positives, producing a TRUE PO…
Fuzzing Dictionary Builds and applies fuzzing dictionaries so a fuzzer can produce the keywords, magic bytes, and to…
Fuzzing Obstacles Patches past the barriers that stop a fuzzer making progress — checksum and hash verification, ma…
Genotoxic Graph-informed mutation testing triage.
Gh Cli Enforces authenticated gh CLI workflows over unauthenticated curl, WebFetch, and MCP fetch patterns.
Github Triage Triages a repository's open GitHub issues and pull requests via the gh CLI.
Goal Prompt Drafts copy-paste-ready /goal commands for goal mode in Claude Code and Codex.
Graph Evolution Compares Trailmark code graphs at two source code snapshots (git commits, tags, or directories) t…
Guidelines Advisor Smart contract development advisor based on Trail of Bits' best practices.
Harness Writing Designs and improves fuzzing harnesses for C/C++ and Rust.
Interpreting Culture Index Interprets Culture Index (CI) surveys, behavioral profiles, and personality assessment data.
Let Fate Decide Draws the 12 Houses of the Zodiac Tarot spread to inject entropy into planning when prompts are v…
Libafl Builds custom fuzzers with LibAFL, the modular Rust fuzzing library.
Libfuzzer Sets up and runs libFuzzer, the coverage-guided fuzzer built into LLVM, on C/C++ code that compil…
Mermaid To Proverif Translates Mermaid sequenceDiagrams describing cryptographic protocols into ProVerif formal verif…
Modern Cpp Guides C++ code toward modern idioms (C++20/23/26).
Modern Python Configures Python projects with modern tooling (uv, ruff, ty).
Mutation Testing Configures mewt or muton campaigns, analyzes surviving mutants, and investigates bugs exposed by…
Open Sourcing This skill should be used when the user asks to "open source this project", "prepare this reposit…
Ossfuzz Enrolls a project in OSS-Fuzz, Google's free continuous fuzzing service for open source, and driv…