EXPLORE COMPONENTS

Audit Context Building

skilltrail-of-bitsaudit+2

Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug findi...

Supply Chain Risk Auditor

skilltrail-of-bitssupply+3

Identifies dependencies at heightened risk of exploitation or takeover. Use when assessing supply chain attack surface,...

Supply Chain Risk Auditor

supply-chaindependenciesnpm-audit+1

Evaluates dependency threat landscapes for software supply chain security.

Feb 25, 20266.4kTry Live

False Positive Check

Systematically verifies suspected security bugs to eliminate false positives. Produces TRUE POSITIVE or FALSE POSITIVE v...

skilltrail-of-bitscheck

Insecure Defaults

skilltrail-of-bitsinsecure+1

Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurel...

Firebase APK Scanner

skilltrail-of-bitsfirebase+2

Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication iss...

Mutation Testing

skilltrail-of-bitsmutation+1

Configures mewt or muton mutation testing campaigns — scopes targets, tunes timeouts, and optimizes long-running runs. U...

DWARF Expert

skilltrail-of-bitsdwarf+1

Provides expertise for analyzing DWARF debug files and understanding the DWARF debug format/standard (v3-v5). Triggers w...

Semgrep Rule Creator

skilltrail-of-bitssemgrep+2

Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Use when writing S...

Entry Point Analyzer

skilltrail-of-bitsentry+2

Analyzes smart contract codebases to identify state-changing entry points for security auditing. Detects externally call...

Second Opinion

skilltrail-of-bitssecond+1

83/100

Runs external LLM code reviews (OpenAI Codex or Google Gemini CLI) on uncommitted changes, branch diffs, or specific com...

Skill Improver

skilltrail-of-bitsimprover

83/100

Iteratively reviews and fixes Claude Code skill quality issues until they meet standards. Runs automated fix-review cycl...

Threat Modeling Skill

threat-modelingstridesecurity-architecture+1

CldKit Team

80/100

STRIDE-based threat modeling for identifying and mitigating security risks in architectures.

Mar 10, 20262 recipesTry Live

Arc Security

MCP

ArcSelf

Scan AI agent skills for 25 attack classes + runtime monitoring. 1,316+ findings.

securityarcselfscan+2

May 27, 20262 recipes

Dns

MCP✓ VERIFIED

MadaBurns

securityblackveilsecurityemail+2

DNS and email security scanner with 73 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.

May 27, 20266

Ansvar: Security Frameworks

MCP

Ansvar Systems

securityansvarframeworks+2

262 control frameworks (NIST, ISO 27001, OWASP) via Ansvar Gateway. Cited, OAuth + paid.

May 27, 2026

PromptGuard

MCP

Acebot712

securitypromptguardscan+2

Scan prompts for injection attacks, redact PII, and audit LLM SDK usage from any MCP client

May 27, 2026

Android Reverse Engineering Skill