EXPLORE COMPONENTS

Feb 20, 20266.4k4 recipes

Runs CodeQL and Semgrep for automated security vulnerability detection in codebases.

codeqlsemgrepsast+1

Constant Time Analysis

skilltrail-of-bitsconstant+2

Detects timing side-channel vulnerabilities in cryptographic code. Use when implementing or reviewing crypto code, encou...

Agentic Actions Auditor

skilltrail-of-bitsagentic+2

Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemi...

C/C++ Security Review

Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-spe...

skilltrail-of-bitsreview

Trail of Bits Skills

security-auditvulnerabilitybinary-analysis+1

Security audit skill collection from Trail of Bits covering vulnerability detection, binary analysis, SAST, and secure c...

Mar 25, 20266.4k

GitHub MCP Server

MCP✓ VERIFIED

Anthropic

88/100

MCP server for GitHub API integration - repos, issues, PRs, and more.

githubgitapi+1

Feb 15, 202689.1k16 recipes

Sharp Edges

skilltrail-of-bitssharp+1

88/100

Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when revie...

Differential Review Skill

87/100

Security-focused review of code changes using git history analysis to find regressions.

diffgitregression+1

Feb 20, 20266.4k1 recipe

Guidelines Advisor

skilltrail-of-bitssmart-contracts+4

Smart contract development advisor based on Trail of Bits' best practices. Analyzes codebase to generate documentation/s...

Audit Prep Assistant

skilltrail-of-bitssmart-contracts+4

Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tool...

Cosmos Vulnerability Scanner

skilltrail-of-bitssmart-contracts+5

Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund lo...

Secure Workflow Guide

skilltrail-of-bitssmart-contracts+5

Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeab...

grafanaprometheusmonitoring+1

Grafana MCP

MCP

Grafana Labs

85/100

Official Grafana Labs MCP server for querying dashboards, Prometheus metrics, and alerting rules. Enables AI agents to i...

Mar 25, 20263.3k4 recipes

Understand Anything

codebase-analysisknowledge-graphvisualization

Lum1104

85/100

Codebase analysis skill that generates knowledge graphs and visual dependency maps to help understand unfamiliar reposit...

Mar 25, 202677.2k

Code Reviewer Skill

code-reviewqualitysecurity+1

85/100

Automated code review skill with security and quality checks.

Feb 18, 20266.4k3 recipes

Property Based Testing

skilltrail-of-bitsproperty+2

84/100

Provides guidance for property-based testing across multiple languages and smart contracts. Use when writing tests, revi...

Insecure Defaults

skilltrail-of-bitsinsecure+1

84/100

Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurel...

Skill Improver

skilltrail-of-bitsimprover

83/100

Iteratively reviews and fixes Claude Code skill quality issues until they meet standards. Runs automated fix-review cycl...

Second Opinion

skilltrail-of-bitssecond+1

83/100

Runs external LLM code reviews (OpenAI Codex or Google Gemini CLI) on uncommitted changes, branch diffs, or specific com...