EXPLORE COMPONENTS

Feb 20, 20266.4k4 recipes

Runs CodeQL and Semgrep for automated security vulnerability detection in codebases.

codeqlsemgrepsast+1

Semgrep Analysis

skilltrail-of-bitsstatic-analysis+2

Run Semgrep static analysis scan on a codebase using parallel subagents. Supports two scan modes — "run all" (full rules...

CodeQL Analysis

skilltrail-of-bitsstatic-analysis+2

Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Trig...

Trail of Bits Skills

security-auditvulnerabilitybinary-analysis+1

Security audit skill collection from Trail of Bits covering vulnerability detection, binary analysis, SAST, and secure c...

Mar 25, 20266.4k

SARIF Parsing

skilltrail-of-bitsstatic-analysis+3

88/100

Parses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other scanners. Triggers on "parse...

Differential Review Skill

87/100

Security-focused review of code changes using git history analysis to find regressions.

diffgitregression+1

Feb 20, 20266.4k1 recipe

Algorand Vulnerability Scanner

Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, mis...

Substrate Vulnerability Scanner

Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weig...

Cosmos Vulnerability Scanner

Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund lo...

Solana Vulnerability Scanner

Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ow...

Secure Workflow Guide

Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeab...

Cairo Vulnerability Scanner

Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messagi...

Ton Vulnerability Scanner

Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Je...

Secrets Detection Skill

secretscredentialsapi-keys+2

CldKit Team

85/100

Scans codebases for exposed secrets, API keys, credentials, and sensitive data.

Mar 10, 20263 recipes

Understand Anything

codebase-analysisknowledge-graphvisualization

Lum1104

85/100

Codebase analysis skill that generates knowledge graphs and visual dependency maps to help understand unfamiliar reposit...

Mar 25, 202677.2k

Firebase APK Scanner

skilltrail-of-bitsfirebase+2

84/100

Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication iss...

developmentqualitycloudslivecheck+2

LiveCheck AI

MCP

Qualityclouds

82/100

Secure MCP runtime server for scanning and autofixing code issues

May 27, 20264

TridentChain Security

MCP

DevInder1

82/100

Local supply-chain CVE scanner via OSV/NVD. Scans deps and IDE extensions. No upload.

developmentdevinder1tridentchain+2

May 27, 2026

Cartographer

codebase-mappingdocumentationsubagents

kingbootoshi

80/100

Codebase mapping skill that scans repositories and generates structured documentation of file relationships, module boun...

Mar 25, 2026616

Accessibility Audit Skill