Trail Of Bits

secure-workflow-guide

semgrep

semgrep-rule-creator

Creates custom Semgrep rules for detecting security vulnerabilities and code patterns.

semgrep-rule-creator

Creates custom Semgrep rules for detecting security vulnerabilities and code patterns.

semgrep-rule-variant-creator

Takes an existing Semgrep rule and ports it to one or more target languages.

semgrep-rule-variant-creator

Takes an existing Semgrep rule and ports it to one or more target languages.

sharp-edges

Evaluates whether APIs, configurations, and interfaces are resistant to developer misuse.

sharp-edges

Evaluates whether APIs, configurations, and interfaces are resistant to developer misuse.

skill-improver

solana-vulnerability-scanner

spec-to-code-compliance

Verifies that a smart contract codebase implements exactly what its specification documents describe.

spec-to-code-compliance

Verifies that a smart contract codebase implements exactly what its specification documents describe.

static-analysis

Static analysis toolkit combining CodeQL, Semgrep, and SARIF parsing for security vulnerability detection.

substrate-vulnerability-scanner

supply-chain-risk-auditor

testing-handbook-generator

testing-handbook-skills

A meta-skill that reads the Trail of Bits Application Security Testing Handbook and generates Claude Code skills from it.

token-integration-analyzer

ton-vulnerability-scanner

trailmark

trailmark-structural

trailmark-summary

variant-analysis

Variant analysis skill for finding similar vulnerabilities across a codebase after an initial bug is identified.

variant-analysis

Variant analysis skill for finding similar vulnerabilities across a codebase after an initial bug is identified.

vector-forge

wycheproof

yara-rule-authoring

zeroize-audit

fix-github-issue

install-codex-config

merge-dependabot-prs

review-and-fix-pr

context-loader

csv-summarizer

dev-env-setup

simple-formatter

add-language-support

add-language-support

add-language-support

buttercup-langfuse

langfuse

git-worktrees