← All repos

skills

Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

GitHub
agent-skills
Browse cluster: Cosmos blockchain and smart contract languages →
151commits
49contributors
22languages

Tech stack & purpose

Trail of Bits' skills repository provides Claude Code plugins for security research, vulnerability detection, and audit workflows. The repository is structured around agent skills—reusable guidance modules that extend Claude's capabilities—with a focus on security-specific tasks like auditing GitHub Actions workflows for AI agent vulnerabilities, analyzing constant-time code, and other specialized security domains. The material provided includes comprehensive contributor guidelines covering skill authoring best practices, plugin structure, frontmatter conventions, quality standards specific to security skills, and testing procedures, alongside a detailed example of the agentic-actions-auditor plugin that detects nine categories of security issues in CI/CD pipelines using AI agents.

Community & reference links

Languages

Python
63.8%
JavaScript
15.9%
Shell
14.0%
YARA
1.0%
C
0.8%
CodeQL
0.5%
Solidity
0.5%
Lean
0.4%
C#
0.3%
Java
0.3%
Ruby
0.3%
Kotlin
0.3%
Swift
0.3%
TypeScript
0.3%
Rust
0.3%
PHP
0.3%
Makefile
0.2%
Dockerfile
0.2%
Go
0.2%
LLVM
0.1%
C++
0.0%
Assembly
0.0%

Contributors (top 30 of 49)