ffuf-web-fuzzing
Expert guidance for ffuf web fuzzing during authorized penetration testing. Covers directory discovery, subdomain enumeration,…
Use when the user asks to inspect Sentry issues or events, summarize recent production errors,
$ npx -y skills add trailofbits/skills-curated --skill openai-sentry --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
/openai-sentryContext preview
The summary Claude sees to decide when to auto-load this skill.
Use when the user asks to inspect Sentry issues or events, summarize recent production errors,
name: openai-sentry description: Use when the user asks to inspect Sentry issues or events, summarize recent production errors, or pull basic Sentry health data via the Sentry API; perform read-only queries with the bundled script and require `SENTRY_AUTH_TOKEN`. Originally from OpenAI's curated skills catalog. allowed-tools: - Bash - Read - Grep - Glob - Write - Edit
If the token is missing, give the user these steps: 1. Create a Sentry auth token: https://sentry.io/settings/account/api/auth-tokens/ 2. Create a token with read-only scopes such as `project:read`, `event:read`, and `org:read`. 3. Set `SENTRY_AUTH_TOKEN` as an environment variable in their system. 4. Offer to guide them through setting the environment variable for their OS/shell if needed.
Use `scripts/sentry_api.py` for deterministic API calls. It handles pagination and retries once on transient errors.
Scripts and references are located under `{baseDir}/`.
Always use these endpoints (GET only):
Example prompt: “List the top 10 open issues for prod in the last 24h.” Expected: ordered list with titles, short IDs, counts, last seen.
<!-- TODO: review -->
<!-- TODO: review -->
Trail of Bits' reviewed and approved Claude Code plugins. Every skill and marketplace here has been vetted for quality and safety.
Expert guidance for ffuf web fuzzing during authorized penetration testing. Covers directory discovery, subdomain enumeration,…
Reverse engineers binaries using Ghidra's headless analyzer. Use when decompiling executables, extracting functions, strings,…
Remove signs of AI-generated writing from text. Use when editing or reviewing text to make it sound more natural and…
Researches a topic from the last 30 days on Reddit, X, and the web. Surfaces real community discussions with engagement metrics…
Deploy applications and infrastructure to Cloudflare using Workers, Pages, and related platform
Use when the agent is building or iterating on a web game (HTML/JS) and needs a reliable