agentic-actions-audito…
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI…
Configures mewt or muton mutation testing campaigns — scopes targets, tunes timeouts, and optimizes long-running runs. Use when the user mentions mewt, muton, mutation testing, or wants to configure or optimize a mutation testing campaign.
$ npx -y skills add trailofbits/skills --skill mutation-testing --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
/mutation-testingContext preview
The summary Claude sees to decide when to auto-load this skill.
Configures mewt or muton mutation testing campaigns — scopes targets, tunes timeouts, and optimizes long-running runs. Use when the user mentions mewt, muton, mutation testing, or wants to configure or optimize a mutation testing campaign.
name: mutation-testing description: "Configures mewt or muton mutation testing campaigns — scopes targets, tunes timeouts, and optimizes long-running runs. Use when the user mentions mewt, muton, mutation testing, or wants to configure or optimize a mutation testing campaign." allowed-tools: Read Write Bash Grep
> **Note**: muton and mewt share identical interfaces but target different languages — mewt for general-purpose languages (Rust, Solidity, Go, TypeScript, JavaScript), muton for TON smart contracts (Tact, Tolk, FunC). All examples use `mewt` commands, but they work exactly the same with `muton`. File names change accordingly: `mewt.toml` → `muton.toml`, `mewt.sqlite` → `muton.sqlite`.
Use this skill when the user:
Do not use this skill when the user:
---
Load [workflows/configuration.md](workflows/configuration.md) — a 5-phase guide from `mewt init` to a validated, ready-to-run campaign.
**General question or unfamiliar command?** Run `mewt --help` or `mewt <subcommand> --help`, then assist.
---
| File | Content | |------|---------| | [workflows/configuration.md](workflows/configuration.md) | 5-phase guide: init, scope, optimize, validate, run | | [references/optimization-strategies.md](references/optimization-strategies.md) | Per-file targeting, two-phase campaigns, mutation type filtering |
---
# Initialize and mutate mewt init # Create mewt.toml and mewt.sqlite mewt mutate [paths] # Generate mutants without running tests mewt run [paths] # Run the full campaign # Inspect configuration and scope mewt print config # View effective configuration mewt print targets # Table of all targeted files mewt print mutations --language [lang] # Available mutation types mewt status # Mutant count and per-file breakdown # Investigate specific mutants mewt print mutants --target [path] # All mutants for a file mewt print mutants --severity high # Filter by severity mewt print mutant --id [id] # View mutated code diff mewt test --ids [ids] # Re-test specific mutants
---
A Claude Code plugin marketplace from Trail of Bits providing skills to enhance AI-assisted security analysis, testing, and development workflows. Codex can load this marketplace through its Claude marketplace compatibility.
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI…
Understand a codebase before looking for bugs in it - what each function assumes, what it guarantees, and what it depends on elsewhere. Use when starting an…
Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access…
Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tools, increases test coverage, removes…
Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address conversion problems,…
Systematic code maturity assessment using Trail of Bits' 9-category framework. Analyzes codebase for arithmetic safety, auditing practices, access controls,…