trailofbits/skills
Security-focused skills from Trail of Bits, packaging the firm’s auditing and analysis practices for Claude Code as an installable marketplace.
Why it matters
Trail of Bits is a respected name in software security, and this repo distills professional audit techniques into skills you can install and run. That provenance matters: the guidance reflects how practitioners actually find bugs, not generic advice. For teams that want expert-grade security review inside their agent workflow, the pedigree is the point.
Use cases
- Apply professional security-audit techniques to your code
- Install a vetted, practitioner-authored security skill set
- Add expert review to a development workflow
- Learn how a leading security firm structures its analysis
Quickstart
/plugin marketplace add trailofbits/skillsRelated repositories
android-reverse-engineering-skill
A skill that walks Claude through reverse-engineering Android applications — unpacking APKs, reading decompiled code, and reasoning about app behavior.
From the blog
CLI-Anything Guide: Turning Desktop GUIs into Stateful, Agent-Native CLIs
The definitive guide to HKUDS/CLI-Anything. Learn how to transform complex GUI apps into deterministic, agent-native CLIs with REPLs, stateful undo stacks, and zero screenshot fumbling.
The State of Claude Skills: Spring 2026
An in-depth look at how the open-source community is building around Claude, the rise of MCP servers, and what to expect next.
Maintain this repo? Submit an update.
Submit an update