Directory · Skills

Trail of Bits Skills

Claude Code plugin marketplace from Trail of Bits with skills for security auditing, vulnerability detection, and verification workflows.

★ 7,537 stars · last updated 2026-10-14 · Free, open source · View on GitHub

Best for

• Security researchers auditing C/C++, Rust, or smart contract code with Claude Code
• Writing Semgrep, CodeQL, and YARA rules with agent assistance
• Triaging vulnerability reports and checking for false positives
• Supply chain, GitHub Actions, and insecure-default audits

Install

/plugin marketplace add trailofbits/skills

Our take

Maintained by security firm Trail of Bits and actively updated, with dozens of plugins spanning smart contracts, code auditing, verification, reverse engineering, and general development. The README also documents Codex compatibility via `codex plugin marketplace add trailofbits/skills` and lists one reported real-world bug found with the constant-time-analysis skill. A few plugins (Culture Index, Tarot cards) are unrelated to security, and the content is licensed CC-BY-SA-4.0 rather than a software license.

Similar skills

• Karpathy-Inspired Claude Code Guidelines: A single CLAUDE.md with four principles to curb overengineering, silent assumptions, and unrelated edits in Claude Code.
• Scientific Agent Skills: A library of 177 Agent Skills that guide coding agents through scientific packages, databases, and research workflows.
• reverse-skill: Skill router pack that directs AI coding agents to the right methodology and tools for reverse engineering, pentesting, and security tasks.
• book-to-skill: Converts technical books, document folders, or source collections into structured Agent Skills for Claude Code and other coding agents.
• Hallmark: Design skill for Claude Code, Cursor, and Codex that builds, audits, and redesigns UI while avoiding generic AI-generated looks.
• Claude Skills (alirezarezvani): Large MIT-licensed library of 380+ agent skills, agents, and commands for Claude Code, Codex, Gemini CLI, Cursor, and other coding agents.