Loading plugin...
A Claude Code plugin marketplace from Trail of Bits providing skills to enhance AI-assisted security analysis, testing, and development workflows. Codex can load this marketplace through its Claude marketplace compatibility. Also see: claude-code-config · skills-curated · claude-code-devcontainer · dropkit
A Claude Code plugin marketplace from Trail of Bits providing skills to enhance AI-assisted security analysis, testing, and development workflows. Codex can load this marketplace through its Claude marketplace compatibility.
Also see: claude-code-config · skills-curated · claude-code-devcontainer · dropkit
/plugin marketplace add trailofbits/skills
/plugin menu
Codex supports Claude plugin marketplaces directly, so this repository does not need Codex-specific sidecar metadata.
Install the marketplace with:
codex plugin marketplace add trailofbits/skills
codex plugin list
codex plugin add <plugin-name>@trailofbits
To add the marketplace locally (e.g., for testing or development), navigate to the parent directory of this repository:
cd /path/to/parent # e.g., if repo is at ~/projects/skills, be in ~/projects
/plugins marketplace add ./skills
| Plugin | Description |
|---|---|
| building-secure-contracts | Smart contract security toolkit with vulnerability scanners for 6 blockchains |
| entry-point-analyzer | Identify state-changing entry points in smart contracts for security auditing |
| Plugin | Description |
|---|---|
| agentic-actions-auditor | Audit GitHub Actions workflows for AI agent security vulnerabilities |
| audit-context-building | Build deep architectural context through ultra-granular code analysis |
| burpsuite-project-parser | Search and extract data from Burp Suite project files |
| c-review | Comprehensive C/C++ security review with clustered parallel workers and SARIF output |
| differential-review | Security-focused differential review of code changes with git history analysis |
| dimensional-analysis | Annotate codebases with dimensional analysis comments to detect unit mismatches and formula bugs |
| fp-check | Systematic false positive verification for security bug analysis with mandatory gate reviews |
| insecure-defaults | Detect insecure default configurations, hardcoded credentials, and fail-open security patterns |
| rust-review | Comprehensive Rust security review covering safe/unsafe boundary, memory safety, concurrency, panic-DoS, FFI, and async runtime with SARIF output |
| semgrep-rule-creator | Create and refine Semgrep rules for custom vulnerability detection |
| semgrep-rule-variant-creator |
| Plugin | Description |
|---|---|
| yara-authoring | YARA detection rule authoring with linting, atom analysis, and best practices |
| Plugin | Description |
|---|---|
| constant-time-analysis | Detect compiler-induced timing side-channels in cryptographic code |
| mutation-testing | Configure mewt/muton mutation testing campaigns — scope targets, tune timeouts, optimize long runs |
| property-based-testing | Property-based testing guidance for multiple languages and smart contracts |
| spec-to-code-compliance | Specification-to-code compliance checker for blockchain audits |
| zeroize-audit | Detect missing or compiler-eliminated zeroization of secrets in C/C++ and Rust |
| Plugin | Description |
|---|---|
| dwarf-expert | Interact with and understand the DWARF debugging format |
| Plugin | Description |
|---|---|
| firebase-apk-scanner | Scan Android APKs for Firebase security misconfigurations |
| Plugin | Description |
|---|---|
| ask-questions-if-underspecified | Clarify requirements before implementing |
| devcontainer-setup | Create pre-configured devcontainers with Claude Code and language-specific tooling |
| gh-cli | Intercept GitHub URL fetches and redirect to the authenticated gh CLI |
| git-cleanup | Safely clean up git worktrees and local branches with gated confirmation workflow |
| let-fate-decide | Draw Tarot cards using cryptographic randomness to add entropy to vague planning |
| modern-python | Modern Python tooling and best practices with uv, ruff, and pytest |
| seatbelt-sandboxer | Generate minimal macOS Seatbelt sandbox configurations |
| second-opinion | Run code reviews using external LLM CLIs (OpenAI Codex, Google Gemini) on changes, diffs, or commits. Bundles Codex's built-in MCP server. |
| skill-improver | Iterative skill refinement loop using automated fix-review cycles |
| workflow-skill-design | Design patterns for workflow-based Claude Code skills with review agent |
| Plugin | Description |
|---|---|
| culture-index | Interpret Culture Index survey results for individuals and teams |
| Plugin | Description |
|---|---|
| claude-in-chrome-troubleshooting | Diagnose and fix Claude in Chrome MCP extension connectivity issues |
| Plugin | Description |
|---|---|
| debug-buttercup | Debug Buttercup Kubernetes deployments |
Bugs discovered using Trail of Bits Skills. Found something? Let us know!
When reporting bugs you've found, feel free to mention:
Found using Trail of Bits Skills
| Skill | Bug |
|---|---|
| constant-time-analysis | Timing side-channel in ML-DSA signing |
We welcome contributions! Please see CLAUDE.md for skill authoring guidelines.
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License. Made by Trail of Bits.
.claude-plugin/
marketplace.json
.github/
dependabot.yml
ISSUE_TEMPLATE/
trophy-case.yml
scripts/
check_claude_loadability.py
check_codex_loadability.py
validate_plugin_metadata.py
workflows/
lint.yml
validate.yml
.gitignore
.pre-commit-config.yaml
AGENTS.md
CLAUDE.md
CODEOWNERS
LICENSE
plugins/
agentic-actions-auditor/
.claude-plugin/
plugin.json
README.md
skills/
agentic-actions-auditor/
agents/
openai.yaml
assets/
trail-of-bits-mark.svg
references/
action-profiles.md
cross-file-resolution.md
foundations.md
vector-a-env-var-intermediary.md
vector-b-direct-expression-injection.md
vector-c-cli-data-fetch.md
vector-d-pr-target-checkout.md
vector-e-error-log-injection.md
vector-f-subshell-expansion.md
vector-g-eval-of-ai-output.md
vector-h-dangerous-sandbox-configs.md
vector-i-wildcard-allowlists.md
SKILL.md
ask-questions-if-underspecified/
.claude-plugin/
plugin.json
README.md
skills/
ask-questions-if-underspecified/
agents/
openai.yaml
assets/
trail-of-bits-mark.svg
SKILL.md
audit-context-building/
.claude-plugin/
plugin.json
agents/
function-analyzer.md
commands/
audit-context.md
README.md
skills/
audit-context-building/
agents/
openai.yaml
assets/
trail-of-bits-mark.svg
resources/
COMPLETENESS_CHECKLIST.md
FUNCTION_MICRO_ANALYSIS_EXAMPLE.md
OUTPUT_REQUIREMENTS.md
SKILL.md
building-secure-contracts/
.claude-plugin/
plugin.json
README.md
skills/
algorand-vulnerability-scanner/
agents/
openai.yaml
assets/
trail-of-bits-mark.svg
resources/
VULNERABILITY_PATTERNS.md
SKILL.md
audit-prep-assistant/
agents/
openai.yaml
assets/
trail-of-bits-mark.svg
SKILL.md
cairo-vulnerability-scanner/
agents/
openai.yaml
assets/
trail-of-bits-mark.svg
resources/
VULNERABILITY_PATTERNS.md
SKILL.md
code-maturity-assessor/
agents/
openai.yaml
assets/
trail-of-bits-mark.svg
resources/
ASSESSMENT_CRITERIA.md
EXAMPLE_REPORT.md
REPORT_FORMAT.md
SKILL.md
cosmos-vulnerability-scanner/
agents/
openai.yaml
assets/
trail-of-bits-mark.svg
CHANGELOG.md
resources/
ADVANCED_VULNERABILITY_PATTERNS.md
COSMWASM_VULNERABILITY_PATTERNS.md
DISCOVERY.md
EVM_VULNERABILITY_PATTERNS.md
IBC_VULNERABILITY_PATTERNS.md
STATE_VULNERABILITY_PATTERNS.md
VULNERABILITY_PATTERNS.md
SKILL.md
guidelines-advisor/
agents/
openai.yaml
assets/
trail-of-bits-mark.svg
resources/
ASSESSMENT_AREAS.md
DELIVERABLES.md
EXAMPLE_REPORT.md
SKILL.md
secure-workflow-guide/
agents/
openai.yaml
assets/
trail-of-bits-mark.svg
resources/
EXAMPLE_REPORT.md
WORKFLOW_STEPS.md
SKILL.md
solana-vulnerability-scanner/
agents/
openai.yaml
assets/
trail-of-bits-mark.svg
resources/
VULNERABILITY_PATTERNS.md
SKILL.md
substrate-vulnerability-scanner/
agents/
openai.yaml
assets/
trail-of-bits-mark.svg
resources/
VULNERABILITY_PATTERNS.md
SKILL.md
token-integration-analyzer/
agents/
openai.yaml
assets/
trail-of-bits-mark.svg
resources/
ASSESSMENT_CATEGORIES.md
REPORT_TEMPLATES.md
SKILL.md
ton-vulnerability-scanner/
agents/
openai.yaml
assets/
trail-of-bits-mark.svg
resources/
VULNERABILITY_PATTERNS.md
SKILL.md
burpsuite-project-parser/
.claude-plugin/
plugin.json
commands/
burp-search.md
README.md
skills/
burpsuite-project-parser/
agents/
openai.yaml
assets/
trail-of-bits-mark.svg
scripts/
burp-search.sh
SKILL.md
c-review/
.claude-plugin/
plugin.json
agents/
c-review-dedup-judge.md
c-review-fp-judge.md
c-review-worker.md
prompts/
clusters/
ambient-state.md
arithmetic-type.md
buffer-write-sinks.md
concurrency.md
cpp-semantics.md
manifest.json
object-lifecycle.md
static-hygiene.md
syscall-retval.md
windows-fs-path.md
windows-ipc-crypto.md
windows-process.md
general/
access-control-finder.md
compiler-bugs-finder.md
dos-finder.md
error-handling-finder.md
exception-safety-finder.md
exploit-mitigations-finder.md
filesystem-issues-finder.md
init-order-finder.md
integer-overflow-finder.md
iterator-invalidation-finder.md
lambda-capture-finder.md
memory-leak-finder.md
move-semantics-finder.md
null-deref-finder.md
operator-precedence-finder.md
race-condition-finder.md
regex-issues-finder.md
smart-pointer-finder.md
time-issues-finder.md
type-confusion-finder.md
undefined-behavior-finder.md
uninitialized-data-finder.md
use-after-free-finder.md
virtual-function-finder.md
linux-userspace/
eintr-handling-finder.md
envvar-finder.md
errno-handling-finder.md
half-closed-socket-finder.md
inet-aton-finder.md
negative-retval-finder.md
null-zero-finder.md
oob-comparison-finder.md
open-issues-finder.md
printf-attr-finder.md
privilege-drop-finder.md
qsort-finder.md
signal-handler-finder.md
socket-disconnect-finder.md
spinlock-init-finder.md
thread-safety-finder.md
va-start-end-finder.md
windows-userspace/
createprocess-finder.md
cross-process-finder.md
dll-planting-finder.md
installer-race-finder.md
named-pipe-finder.md
service-security-finder.md
token-privilege-finder.md
windows-alloc-finder.md
windows-crypto-finder.md
windows-path-finder.md
README.md
scripts/
build_run_plan.py
generate_sarif.py
pyproject.toml
test_generate_sarif.py
test_split.py
test_validate_artifacts.py
validate_artifacts.py
skills/
c-review/
agents/
openai.yaml
assets/
trail-of-bits-mark.svg
SKILL.md
claude-in-chrome-troubleshooting/
.claude-plugin/
plugin.json
README.md
skills/
chrome-mcp-troubleshooting/
agents/
openai.yaml
assets/
trail-of-bits-mark.svg
SKILL.md
constant-time-analysis/
.claude-plugin/
plugin.json
.gitignore
commands/
ct-check.md
ct_analyzer/
__init__.py
analyzer.py
script_analyzers.py
tests/
__init__.py
test_analyzer.py
test_samples/
bn_excerpt.js
decompose_constant_time.c
decompose_vulnerable.c
decompose_vulnerable.go
decompose_vulnerable.rs
vulnerable.cs
vulnerable.java
vulnerable.kt
vulnerable.php
vulnerable.py
vulnerable.rb
vulnerable.swift
vulnerable.ts
pyproject.toml
README.md
skills/
constant-time-analysis/
agents/
openai.yaml
assets/
trail-of-bits-mark.svg
README.md
references/
compiled.md
javascript.md
kotlin.md
php.md
python.md
ruby.md
swift.md
vm-compiled.md
SKILL.md
uv.lock
culture-index/
.claude-plugin/
plugin.json
README.md
skills/
interpreting-culture-index/
agents/
openai.yaml
assets/
trail-of-bits-mark.svg
references/
anti-patterns.md
archetype-administrator.md
archetype-coordinator.md
archetype-craftsman.md
archetype-daredevil.md
archetype-debater.md
archetype-facilitator.md
archetype-influencer.md
archetype-operator.md
archetype-persuader.md
archetype-philosopher.md
archetype-rainmaker.md
archetype-scholar.md
archetype-socializer.md
archetype-specialist.md
archetype-technical-expert.md
archetype-traditionalist.md
archetype-trailblazer.md
conversation-starters.md
interview-trait-signals.md
motivators.md
patterns-archetypes.md
primary-traits.md
secondary-traits.md
team-composition.md
scripts/
check_deps.py
culture_index/
__init__.py
constants.py
extract.py
models.py
opencv_extractor.py
extract_pdf.py
pyproject.toml
SKILL.md
templates/
burnout-report.md
comparison-report.md
hiring-profile.md
individual-report.md
predicted-profile.md
team-report.md
workflows/
analyze-team.md
coach-manager.md
compare-profiles.md
... 1090 more© 2026 Flowy · Free and open source
Built for Claude Code · Not affiliated with Anthropic
| Port existing Semgrep rules to new target languages with test-driven validation |
| sharp-edges | Identify error-prone APIs, dangerous configurations, and footgun designs |
| static-analysis | Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing |
| supply-chain-risk-auditor | Audit supply-chain threat landscape of project dependencies |
| testing-handbook-skills | Skills from the Testing Handbook: fuzzers, static analysis, sanitizers, coverage |
| trailmark | Code graph analysis, Mermaid diagrams, mutation testing triage, and protocol verification |
| variant-analysis | Find similar vulnerabilities across codebases using pattern-based analysis |