# trailofbits-skills

A Claude Code plugin marketplace from Trail of Bits providing skills to enhance AI-assisted security analysis, testing, and development workflows. Codex can load this marketplace through its Claude marketplace compatibility.

- Tier: Indexed (plain plugin)
- Category: Security
- Page: https://www.flowy.sh/listings/trailofbits-skills
- Source: https://github.com/trailofbits/skills
- Price: free and open source

## Summary
trailofbits-skills is a Claude Code plugin with 83 hand-picked skills for security work, indexed on Flowy. Install it with the command on its page. It includes agentic-actions-auditor, audit-context-building, algorand-vulnerability-scanner. Its skills do not fire on their own yet. Request auto-invocation to have Flowy route them as you prompt. Free and open source.

## Install (Claude Code)
```
/plugin marketplace add trailofbits/skills
```

## Skills
- agentic-actions-auditor
- audit-context-building
- algorand-vulnerability-scanner
- audit-prep-assistant
- cairo-vulnerability-scanner
- code-maturity-assessor
- cosmos-vulnerability-scanner
- guidelines-advisor
- secure-workflow-guide
- solana-vulnerability-scanner
- substrate-vulnerability-scanner
- token-integration-analyzer
- ton-vulnerability-scanner
- burpsuite-project-parser
- c-review
- chrome-mcp-troubleshooting
- code-improver
- pr-improver
- skill-improver
- constant-time-analysis
- interpreting-culture-index
- devcontainer-setup
- differential-review
- dimensional-analysis
- dwarf-expert
- entry-point-analyzer
- firebase-apk-scanner
- fp-check
- gh-cli
- github-triage
- goal-prompt
- let-fate-decide
- modern-cpp
- modern-python
- mutation-testing
- open-sourcing
- post-patch-validation
- property-based-testing
- review-walkthrough
- rust-review
- second-opinion
- semgrep-rule-creator
- semgrep-rule-variant-creator
- sharp-edges
- spec-to-code-compliance
- codeql
- sarif-parsing
- semgrep
- supply-chain-risk-auditor
- address-sanitizer
- aflpp
- atheris
- cargo-fuzz
- constant-time-testing
- coverage-analysis
- fuzzing-dictionary
- fuzzing-obstacles
- harness-writing
- libafl
- libfuzzer
- ossfuzz
- ruzzy
- testing-handbook-generator
- wycheproof
- audit-augmentation
- crypto-protocol-diagram
- diagramming-code
- genotoxic
- graph-evolution
- mermaid-to-proverif
- slicing-code-context
- trailmark-finding-triage
- trailmark-review-gate
- trailmark-structural
- trailmark-summary
- trailmark-variant-neighborhood
- trailmark
- vector-forge
- variant-analysis
- vulnerability-triage-brocards
- writing-lean-proofs
- yara-rule-authoring
- zeroize-audit

## FAQ

### What is trailofbits-skills?
A Claude Code plugin marketplace from Trail of Bits providing skills to enhance AI-assisted security analysis, testing, and development workflows. Codex can load this marketplace through its Claude marketplace compatibility.

### How do I install trailofbits-skills?
Run these in Claude Code: /plugin marketplace add trailofbits/skills. Then prompt normally.

### Does trailofbits-skills auto-invoke its skills?
Not yet. It is indexed on Flowy as a plain plugin. Request auto-invocation on its page and Flowy will route its skills for you as you prompt.

### Is trailofbits-skills free?
Yes. Flowy is free and open source, with nothing gated. You can read every skill in full before you install.