Quality

Check reviews code diffs, PRs, issue queues, release readiness, commits, pushes, publishing, and project audits. Use it for code review, issue/PR triage, release gates, publishing follow-through, or project audits.

Hunt finds root cause before applying fixes for errors, crashes, regressions, failing tests, broken behavior, and screenshot-reported defects. Use it when users report errors, crashes, broken behavior, regressions, failing tests, or something that used to work and now fails.

Algorand Vulnerability Scanner scans TEAL and PyTeal smart contracts for 11 common Algorand vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access control issues. Use it when auditing Algorand projects or training on Algorand-specific security patterns.

Audit Context Building analyzes an unfamiliar codebase to map functions, assumptions, guarantees, and dependencies before any vulnerability hunting. Use it at the start of an audit, threat model, or architecture review to produce dossiers and open questions that feed later phases.

Audit Prep Assistant prepares codebases for security reviews using Trail of Bits' checklist. It helps set review goals, runs static analysis tools, increases test coverage, removes dead code, ensures accessibility, and generates documentation.

Burp Suite Project Parser searches and explores Burp Suite project files (.burp) from the command line. Use it when searching response headers or bodies with regex patterns, extracting security audit findings, dumping proxy history or site map data, or analyzing HTTP traffic captured in a Burp project.

C/C++ Security Review performs comprehensive security audits of native C/C++ applications for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities. Use it when auditing userspace daemons, services, or applications for memory safety issues.

Cairo StarkNet Vulnerability Scanner scans Cairo smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address conversion problems, and signature replay. Use it when auditing StarkNet projects.

Code Maturity Assessor evaluates codebases across 9 security and quality categories using Trail of Bits' framework, producing evidence-based ratings and actionable recommendations.

Constant-Time Analysis detects timing side-channel vulnerabilities in cryptographic code by statically inspecting compiled output for variable-time instructions. Use it when implementing or reviewing crypto routines, division on secrets, or secret-dependent branches.

Cosmos Vulnerability Scanner scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities such as chain halts, fund loss, and state divergence. Use it when auditing custom x/ modules, reviewing IBC integrations, or assessing pre-launch chain security.

Differential Security Review performs security-focused review of pull requests, commits, and diffs, adapting depth to codebase size. It uses git history for context, calculates blast radius, checks test coverage, and generates comprehensive markdown reports to prevent security regressions.