trailofbits: skills, plugins and MCP servers

semgrep trailofbits skill Runs a Semgrep static security audit on your codebase. It presents a plan for user confirmation and merges all findings into SARIF. Claude Code CX Codex Cursor +1 9,500installs differential-review trailofbits skill Reviews code changes for security issues using Git history and test coverage. Use it for commits, diffs, and pull requests that need a written review report. Claude Code CX Codex Cursor +1 8,800installs modern-python trailofbits skill Configures Python projects with a modern tooling stack: uv for dependency management, ruff for linting and formatting, ty for type checking. Use when starting new projects, writing scripts, or migrating from legacy tools. Claude Code CX Codex Cursor +1 8,700installs secure-workflow-guide trailofbits skill Guides smart contracts through Trail of Bits' 5-step security audit on check-in or before deployment. It runs static analysis, generates visual charts, and prepares fuzzing tests. Claude Code CX Codex Cursor +1 7,400installs sharp-edges trailofbits skill Audits API designs and configuration schemas for developer footguns. Flags dangerous defaults and fragile interfaces where the easiest path causes security vulnerabilities. Claude Code CX Codex Cursor +1 6,900installs agentic-actions-auditor trailofbits skill Inspects GitHub Actions workflows for prompt injection risks and insecure AI agent setups. Catches attacker inputs leaking into prompts via event contexts or environment variables. Claude Code CX Codex Cursor +1 6,700installs gh-cli trailofbits skill A skill that redirects GitHub requests from curl and fetch to authenticated gh CLI for repositories, pull requests, and issues. Use it for private repos and higher API limits. Claude Code CX Codex Cursor +1 6,600installs variant-analysis trailofbits skill Finds related occurrences of an already identified defect across a repository. Use it after a vulnerability or logic issue turns up and similar code needs checking. Claude Code CX Codex Cursor +1 6,400installs sarif-parsing trailofbits skill Processes existing SARIF reports from CodeQL, Semgrep, and other scanners. Use it to filter findings, remove duplicates, or prepare results for CI/CD. Claude Code CX Codex Cursor +1 5,900installs audit-prep-assistant trailofbits skill Prepares codebases for external security reviews using Trail of Bits' checklist. It helps run static analysis, boost test coverage, and generate system documentation. Claude Code CX Codex Cursor +1 5,700installs entry-point-analyzer trailofbits skill Finds externally callable smart contract functions that change state and classifies their access level. Use it before an audit to map the attack surface. Claude Code CX Codex Cursor +1 5,700installs semgrep-rule-creator trailofbits skill A skill that walks you through creating custom Semgrep rules to detect security vulnerabilities and code patterns in your projects. Use it when you need static analysis tailored to your codebase. Claude Code CX Codex Cursor +1 5,700installs token-integration-analyzer trailofbits skill Checks ERC20 and ERC721 implementations plus code that integrates external tokens. Use it before accepting tokens with non-standard transfer or approval behaviour. Claude Code CX Codex Cursor +1 5,500installs cargo-fuzz trailofbits skill Sets up cargo-fuzz inside a Cargo-based Rust crate and walks through the harness, sanitizers and crash triage. Claude Code CX Codex Cursor +1 5,400installs guidelines-advisor trailofbits skill Audits smart contract codebases against Trail of Bits guidelines. It spots upgradeability pitfalls, flawed inheritance, and testing gaps. Claude Code CX Codex Cursor +1 5,400installs coverage-analysis trailofbits skill Measures code reached by a fuzzing campaign and helps explain stalled path discovery. Use it to inspect harness changes, corpus results, and unreachable branches. Claude Code CX Codex Cursor +1 5,400installs fuzzing-dictionary trailofbits skill Generates and connects token dictionaries for parsers and protocols in libFuzzer or AFL++ when coverage stalls on initial checks. Claude Code CX Codex Cursor +1 5,300installs semgrep-rule-variant-creator trailofbits skill Ports completed Semgrep rules to selected languages and creates separate rule and test directories. Use it when you already have a rule to adapt. Claude Code CX Codex Cursor +1 5,300installs fuzzing-obstacles trailofbits skill Patches anti-fuzzing patterns like checksums and time-seeded PRNGs in C, C++, and Rust. Useful when fuzzers get stuck on early validation checks. Claude Code CX Codex Cursor +1 5,300installs substrate-vulnerability-scanner trailofbits skill Scans Substrate and Polkadot pallets for 7 critical vulnerabilities such as panic DoS and integer overflow. Useful when auditing FRAME runtimes before mainnet launch. Claude Code CX Codex Cursor +1 5,200installs atheris trailofbits skill Guides setup of coverage-guided fuzzing for Python code and C extensions with Atheris. Use it to investigate crashes and memory corruption. Claude Code CX Codex Cursor +1 5,200installs ossfuzz trailofbits skill Guides your AI agent through enrolling projects in Google OSS-Fuzz and running fuzzer targets locally with helper scripts. Claude Code CX Codex Cursor +1 5,200installs devcontainer-setup trailofbits skill Creates a sandboxed devcontainer with Claude Code, persistent volumes, and tooling for Python, Node, Rust, or Go. Helpful when setting up isolated development workspaces. Claude Code CX Codex Cursor +1 5,200installs dwarf-expert trailofbits skill Inspects DWARF debug sections in compiled binaries, verifies DIE trees, and assists with parsers. Handy when analyzing compiled code. Claude Code CX Codex Cursor +1 5,200installs libfuzzer trailofbits skill A skill that walks the agent through libFuzzer: the harness, the -fsanitize=fuzzer build, corpus handling, campaign triage. For C/C++ built with Clang. Claude Code CX Codex Cursor +1 5,200installs second-opinion trailofbits skill Runs external CLI code reviews via Codex or Antigravity. It inspects dirty working trees, branch diffs, and specific commits without editing files. Claude Code CX Codex Cursor +1 5,200installs burpsuite-project-parser trailofbits skill Explores and queries Burp Suite project files from the command line. It extracts proxy history, scanner findings, and HTTP traffic without opening the desktop app. Claude Code CX Codex Cursor +1 5,100installs yara-rule-authoring trailofbits skill Authors and reviews YARA-X detection rules for malware hunting, flagging strings that produce weak atoms and conditions that will fire on clean files. Claude Code CX Codex Cursor +1 5,100installs wycheproof trailofbits skill Validates cryptographic implementations using Project Wycheproof test vectors. It helps your agent spot known vulnerabilities and edge cases across AES, RSA, and ECDSA. Claude Code CX Codex Cursor +1 5,100installs diagramming-code trailofbits skill Generates Mermaid diagrams from code graphs using Trailmark. Useful for visualizing call paths, module dependencies, and data flows. Claude Code CX Codex Cursor +1 4,200installs trailmark trailofbits skill Builds and inspects multi-language code graphs to trace taint propagation, map attack surfaces, and prioritize security audits. Claude Code CX Codex Cursor +1 4,000installs mermaid-to-proverif trailofbits skill Turns a Mermaid sequence diagram of a crypto protocol into a ProVerif model — a .pv file you can check for secrecy, authentication and forward secrecy. Claude Code CX Codex Cursor +1 3,900installs graph-evolution trailofbits skill Compares Trailmark code graphs across two code snapshots to spot structural security changes. It catches attack path expansion and privilege shifts that text diffs overlook. Claude Code CX Codex Cursor +1 3,900installs trailmark-structural trailofbits skill Builds a Trailmark graph for a target directory and reports complexity, taint, blast radius, privilege boundaries, and attack surface data. Claude Code CX Codex Cursor +1 3,900installs audit-augmentation trailofbits skill Projects SARIF static analysis reports, weAudit notes, and binary graphs onto Trailmark code graphs. Useful when mapping vulnerabilities to call graphs and data taint paths. Claude Code CX Codex Cursor +1 3,900installs