/skill-improver
Iteratively reviews and fixes a Claude Code skill until it meets quality standards. Triggers on 'fix my skill', 'improve skill quality', 'skill improvement loop'.
$ npx -y skills add trailofbits/skills --agent claude-codeHow it fires
How this command gets triggered: by you, by Claude, or both.
- Fires itselfClaude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/skill-improver
Context preview
What this command does when you run it.
Iteratively reviews and fixes a Claude Code skill until it meets quality standards. Triggers on 'fix my skill', 'improve skill quality', 'skill improvement loop'.
Command definition
skill-improver.mddescription: "Iteratively reviews and fixes a Claude Code skill until it meets quality standards. Triggers on 'fix my skill', 'improve skill quality', 'skill improvement loop'."
argument-hint: "<SKILL_NAME_OR_PATH> [--max-iterations N]"
allowed-tools: Bash(${CLAUDE_PLUGIN_ROOT}/scripts/setup-skill-improver.sh:*) Task Read Edit Write Glob GrepSkill Improver
Step 1: Resolve Skill Path
The user provided: `$ARGUMENTS`
**Resolution rules:** 1. If input ends with `/SKILL.md` and file exists, use directly 2. If input is a directory containing `SKILL.md`, use that path 3. Otherwise, search for matching skills:
Glob(pattern="**/SKILL.md")
Filter results to find skills matching the user's input (by skill name or path substring).
- **Multiple matches:** Ask the user to choose
- **No matches:** Report available skills
- **Single match:** Proceed with that path
Store the resolved absolute path to the skill directory in `RESOLVED_SKILL_PATH`.
Step 2: Initialize the Loop
Run the setup script with the resolved path:
"${CLAUDE_PLUGIN_ROOT}/scripts/setup-skill-improver.sh" "<RESOLVED_SKILL_PATH>" [--max-iterations N]Substitute `<RESOLVED_SKILL_PATH>` with the actual path. Add `--max-iterations N` only if specified.
Step 3: Follow the Skill Methodology
Apply the `skill-improver:skill-improver` skill to iteratively improve the target skill. The loop continues automatically via the stop hook until completion.
Read more
description: "Iteratively reviews and fixes a Claude Code skill until it meets quality standards. Triggers on 'fix my skill', 'improve skill quality', 'skill improvement loop'."
argument-hint: "<SKILL_NAME_OR_PATH> [--max-iterations N]"
allowed-tools: Bash(${CLAUDE_PLUGIN_ROOT}/scripts/setup-skill-improver.sh:*) Task Read Edit Write Glob GrepSkill Improver
Step 1: Resolve Skill Path
The user provided: `$ARGUMENTS`
**Resolution rules:** 1. If input ends with `/SKILL.md` and file exists, use directly 2. If input is a directory containing `SKILL.md`, use that path 3. Otherwise, search for matching skills:
Glob(pattern="**/SKILL.md")
Filter results to find skills matching the user's input (by skill name or path substring).
- **Multiple matches:** Ask the user to choose
- **No matches:** Report available skills
- **Single match:** Proceed with that path
Store the resolved absolute path to the skill directory in `RESOLVED_SKILL_PATH`.
Step 2: Initialize the Loop
Run the setup script with the resolved path:
"${CLAUDE_PLUGIN_ROOT}/scripts/setup-skill-improver.sh" "<RESOLVED_SKILL_PATH>" [--max-iterations N]Substitute `<RESOLVED_SKILL_PATH>` with the actual path. Add `--max-iterations N` only if specified.
Step 3: Follow the Skill Methodology
Apply the `skill-improver:skill-improver` skill to iteratively improve the target skill. The loop continues automatically via the stop hook until completion.
A Claude Code plugin marketplace from Trail of Bits providing skills to enhance AI-assisted security analysis, testing, and development workflows. Codex can load this marketplace through its Claude marketplace compatibility.
Other commands on trailofbits-skills.
- /burp-search
Searches Burp Suite project files for security analysis
Open command - /ct-check
Detects timing side-channels in cryptographic code
Open command - /diff-review
Performs security-focused differential review of code changes
Open command - /entry-points
Identifies state-changing entry points in smart contracts
Open command - /scan-apk
Scans Android APKs for Firebase security misconfigurations
Open command - /audit
Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open switches, weak crypto, permissive access, debug leakage. Parallel sweeps collect candidates, then a refuting verifier traces each one to the security
Open command

