GitHub

semgrep

Run a Semgrep scan with automatic language detection, parallel execution via Task subagents, and merged SARIF output. Al...

by trailofbits

github

codeql

Supported languages: Python, JavaScript/TypeScript, Go, Java/Kotlin, C/C++, C#, Ruby, Swift. Skill resources: Reference ...

by trailofbits

github

git-cleanup

Safely clean up accumulated git worktrees and local branches by categorizing them into: safely deletable (merged), poten...

by trailofbits

github

semgrep-rule-variant-creator

Port existing Semgrep rules to new target languages with proper applicability analysis and test-driven validation. Ideal...

by trailofbits

github

sarif-parsing

You are a SARIF parsing expert. Your role is to help users effectively read, analyze, and process SARIF files from stati...

by trailofbits

github

libfuzzer

libFuzzer is an in-process, coverage-guided fuzzer that is part of the LLVM project. It's the recommended starting point...

by trailofbits

github

dwarf-expert

This skill provides technical knowledge and expertise about the DWARF standard and how to interact with DWARF files. Tas...

by trailofbits

github

aflpp

AFL++ is a fork of the original AFL fuzzer that offers better fuzzing performance and more advanced features while maint...

by trailofbits

github

ask-questions-if-underspecified

Use this skill when a request has multiple plausible interpretations or key details (objective, scope, constraints, envi...

by trailofbits

github

burpsuite-project-parser

Search and extract data from Burp Suite project files using the burpsuite-project-file-parser extension. Searching respo...

by trailofbits

github

audit-context-building

This skill governs how Claude thinks during the context-building phase of an audit. When active, Claude will: Perform li...

by trailofbits

github

supply-chain-risk-auditor

Activates when the user says "audit this project's dependencies". Assessing dependency risk before a security audit Eval...

by trailofbits

github

designing-workflow-skills

Build workflow-based skills that execute reliably by following structural patterns, not prose. <essentialprinciples> <pr...

by trailofbits

github

firebase-apk-scanner

You are a Firebase security analyst. When this skill is invoked, scan the provided APK(s) for Firebase misconfigurations...

by trailofbits

github

vector-forge

Uses mutation testing to systematically identify gaps in test vector coverage, then generates new test vectors that clos...

by trailofbits

github

semgrep-rule-creator

Create production-quality Semgrep rules with proper testing and validation. Ideal scenarios: Writing Semgrep rules for s...

by trailofbits

github

second-opinion

Shell out to external LLM CLIs for an independent code review powered by a separate model. Supports OpenAI Codex CLI and...

by trailofbits

github

constant-time-analysis

Analyze cryptographic code to detect operations that leak secret data through execution timing variations. User writing ...

by trailofbits

github

interpreting-culture-index

<essentialprinciples> Culture Index measures behavioral traits, not intelligence or skills. There is no "good" or "bad" ...

by trailofbits

github

spec-to-code-compliance

Use this skill when you need to: Verify code implements exactly what documentation specifies Audit smart contracts again...

by trailofbits

github

mermaid-to-proverif

Reads a Mermaid sequenceDiagram describing a cryptographic protocol and produces a ProVerif model (.pv file) that can be...

by trailofbits

github

mutation-testing

Note: muton and mewt share identical interfaces but target different languages — mewt for general-purpose languages (Rus...

by trailofbits

github

gh-cli

Working with GitHub repositories, pull requests, issues, releases, or raw file URLs. You need authenticated access to pr...

by trailofbits

github

ton-vulnerability-scanner

Systematically scan TON blockchain smart contracts written in FunC for platform-specific security vulnerabilities relate...

by trailofbits

github