trailofbits/skills

Security-focused skills from Trail of Bits, packaging the firm’s auditing and analysis practices for Claude Code as an installable marketplace.

6.2k stars 541 forksLicense: CC-BY-SA-4.0Updated 2026-07-17
Securitysecurityauditanalysistrusted
View on GitHub

Why it matters

Trail of Bits is a respected name in software security, and this repo distills professional audit techniques into skills you can install and run. That provenance matters: the guidance reflects how practitioners actually find bugs, not generic advice. For teams that want expert-grade security review inside their agent workflow, the pedigree is the point.

Use cases

  • Apply professional security-audit techniques to your code
  • Install a vetted, practitioner-authored security skill set
  • Add expert review to a development workflow
  • Learn how a leading security firm structures its analysis

Quickstart

/plugin marketplace add trailofbits/skills

Related repositories

SimoneAvogadroSecurity

android-reverse-engineering-skill

A skill that walks Claude through reverse-engineering Android applications — unpacking APKs, reading decompiled code, and reasoning about app behavior.

6.4k 711
androidreverse-engineeringmobilesecurity
gadievronSecurity

raptor

A security skill that puts Claude on top of static-analysis tooling like Semgrep to scan codebases for vulnerabilities and triage the findings.

3.3k 533
securitysemgrepscanningvulnerabilities

Maintain this repo? Submit an update.

Submit an update