Trail Of Bits

ghidra-headless

humanizer

planning-with-files

security-awareness

skill-extractor

last30days

wooyun-legacy

openai-security-threat-model

ffuf-web-fuzzing

openai-develop-web-game

scv-scan

openai-security-best-practices

openai-screenshot

openai-spreadsheet

react-pdf

openai-pdf

openai-playwright

x-research

openai-security-ownership-map

openai-jupyter-notebook

openai-cloudflare-deploy

openai-doc

openai-gh-address-comments

openai-yeet

openai-gh-fix-ci

openai-netlify-deploy

openai-sentry

grilling

handoff

teach

writing-great-skills

idac

address-sanitizer

aflpp

agentic-actions-auditor

algorand-vulnerability-scanner

ask-questions-if-underspecified

Guides an AI agent to pause and ask clarifying questions when a request has ambiguous objectives, unclear scope, or missing constraints.

ask-questions-if-underspecified

Guides an AI agent to pause and ask clarifying questions when a request has ambiguous objectives, unclear scope, or missing constraints.

atheris

audit-augmentation

audit-context-building

A structured analysis skill for the pre-audit phase of code review.

audit-context-building

A structured analysis skill for the pre-audit phase of code review.

audit-prep-assistant

building-secure-contracts

A collection of 11 skills for smart contract security across Algorand, Cairo, Cosmos, Solana, Substrate, and TON.

burpsuite-project-parser

Searches and extracts data from Burp Suite project files (.

burpsuite-project-parser

Searches and extracts data from Burp Suite project files (.

c-review

cairo-vulnerability-scanner

cargo-fuzz

chrome-mcp-troubleshooting

claude-in-chrome-troubleshooting

Diagnoses and fixes connectivity failures between the Claude in Chrome MCP extension and Claude Code CLI on macOS.

code-maturity-assessor

codeql

constant-time-analysis

Detects timing side-channel vulnerabilities in cryptographic code across 12 languages.

constant-time-analysis

Detects timing side-channel vulnerabilities in cryptographic code across 12 languages.

constant-time-testing

cosmos-vulnerability-scanner

coverage-analysis

crypto-protocol-diagram

culture-index

Interprets Culture Index behavioral assessments for individuals and teams.

debug-buttercup

designing-workflow-skills

devcontainer-setup

diagramming-code

differential-review

Runs security-focused differential reviews on PRs, commits, and diffs.

differential-review

Runs security-focused differential reviews on PRs, commits, and diffs.

dimensional-analysis

dwarf-expert

Adds deep knowledge of the DWARF debug format (versions 3-5) to an agent.

dwarf-expert

Adds deep knowledge of the DWARF debug format (versions 3-5) to an agent.

entry-point-analyzer

Analyzes smart contract codebases to map all state-changing entry points for security audits.

entry-point-analyzer

Analyzes smart contract codebases to map all state-changing entry points for security audits.

firebase-apk-scanner

Scans Android APKs for Firebase security misconfigurations by decompiling the app, extracting Firebase configuration, and actively testing endpoints for vulnerabilities.

firebase-apk-scanner

Scans Android APKs for Firebase security misconfigurations by decompiling the app, extracting Firebase configuration, and actively testing endpoints for vulnerabilities.

fp-check

fuzzing-dictionary

fuzzing-obstacles

genotoxic

gh-cli

git-cleanup

graph-evolution

guidelines-advisor

harness-writing

insecure-defaults

Detects fail-open security vulnerabilities where applications run insecurely due to missing or weak configuration.

insecure-defaults

Detects fail-open security vulnerabilities where applications run insecurely due to missing or weak configuration.

interpreting-culture-index

let-fate-decide

libafl

libfuzzer

mermaid-to-proverif

modern-python

Configures Python projects with uv, ruff, and ty — the modern replacements for pip, flake8/black, and mypy.

modern-python

Configures Python projects with uv, ruff, and ty — the modern replacements for pip, flake8/black, and mypy.

mutation-testing

ossfuzz

property-based-testing

Guides property-based testing across Python, JavaScript, Rust, and Solidity/Vyper.

property-based-testing

Guides property-based testing across Python, JavaScript, Rust, and Solidity/Vyper.

rust-review

ruzzy

sarif-parsing

seatbelt-sandboxer

second-opinion