trailofbits/skills

Agentic Actions Auditor provides static security analysis guidance for GitHub Actions workflows that invoke AI coding agents, detecting attack vectors where attacker-controlled input reaches an AI agent. Use it when auditing CI/CD pipeline security for prompt injection risks or evaluating agentic action configurations.

Algorand Vulnerability Scanner scans TEAL and PyTeal smart contracts for 11 common Algorand vulnerabilities including rekeying attacks, unchecked transaction fees, missing field validations, and access control issues. Use it when auditing Algorand projects or training on Algorand-specific security patterns.

Audit Context Building analyzes an unfamiliar codebase to map functions, assumptions, guarantees, and dependencies before any vulnerability hunting. Use it at the start of an audit, threat model, or architecture review to produce dossiers and open questions that feed later phases.

Audit Prep Assistant prepares codebases for security reviews using Trail of Bits' checklist. It helps set review goals, runs static analysis tools, increases test coverage, removes dead code, ensures accessibility, and generates documentation.

Burp Suite Project Parser searches and explores Burp Suite project files (.burp) from the command line. Use it when searching response headers or bodies with regex patterns, extracting security audit findings, dumping proxy history or site map data, or analyzing HTTP traffic captured in a Burp project.

C/C++ Security Review performs comprehensive security audits of native C/C++ applications for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities. Use it when auditing userspace daemons, services, or applications for memory safety issues.

Cairo StarkNet Vulnerability Scanner scans Cairo smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address conversion problems, and signature replay. Use it when auditing StarkNet projects.

Chrome MCP Troubleshooting diagnoses and fixes connectivity issues with the Claude in Chrome MCP extension when tools fail or report 'Browser extension is not connected'. Use it to resolve conflicts between Claude.app Cowork and Claude Code CLI native hosts on macOS.

Code Maturity Assessor evaluates codebases across 9 security and quality categories using Trail of Bits' framework, producing evidence-based ratings and actionable recommendations.

Constant-Time Analysis detects timing side-channel vulnerabilities in cryptographic code by statically inspecting compiled output for variable-time instructions. Use it when implementing or reviewing crypto routines, division on secrets, or secret-dependent branches.

Cosmos Vulnerability Scanner scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities such as chain halts, fund loss, and state divergence. Use it when auditing custom x/ modules, reviewing IBC integrations, or assessing pre-launch chain security.

DWARF Expert analyzes DWARF debug information in compiled binaries. Use it when inspecting .debug_* sections, verifying debug info integrity, or writing code that parses DWARF.

Devcontainer Setup creates pre-configured devcontainers with Claude Code, language-specific tooling (Python/Node/Rust/Go), and persistent volumes. Use when adding devcontainer support to a project or configuring sandboxed Claude Code workspaces.

Differential Security Review performs security-focused review of pull requests, commits, and diffs, adapting depth to codebase size. It uses git history for context, calculates blast radius, checks test coverage, and generates comprehensive markdown reports to prevent security regressions.

Dimensional Analysis annotates codebases with unit and dimension comments, then propagates and validates them to catch formula bugs early. Use when auditing DeFi protocols, blockchain code, or other arithmetic-heavy code.

Entry Point Analyzer identifies state-changing entry points in smart contract codebases for security auditing. Use it to map attack surfaces, classify access control, and generate structured audit reports for Solidity, Vyper, Solana, Move, TON, and CosmWasm.

False Positive Check systematically verifies suspected security bugs to determine if they are true positives or false positives, producing documented evidence for each verdict. Use it when asked to confirm whether a specific finding is real or exploitable.

Firebase APK Scanner scans Android APKs for Firebase security misconfigurations, including open databases, storage buckets, authentication issues, and exposed cloud functions. Use it during authorized mobile app security audits or Firebase endpoint testing.

Guidelines Advisor analyzes smart contract codebases based on Trail of Bits' best practices to generate documentation, review architecture, upgradeability, implementation quality, dependencies, and testing. It provides prioritized actionable recommendations for developers improving contract security.

Interpreting Culture Index analyzes Culture Index surveys, behavioral profiles, and personality assessment data to support individual interpretation, team composition analysis, burnout detection, profile comparison, hiring profiles, manager coaching, and interview transcript analysis.

Secure Workflow Guide walks through Trail of Bits' 5-step secure development workflow for smart contracts, running Slither scans, checking upgradeability and ERC conformance, generating security diagrams, documenting properties for fuzzing, and reviewing manual security areas.

Solana Vulnerability Scanner scans Solana programs (native Rust and Anchor) for six critical vulnerability patterns such as arbitrary CPI, improper PDA validation, and missing signer/ownership checks. Use it when auditing or reviewing Solana smart contracts before deployment.

Substrate Vulnerability Scanner scans Substrate/Polkadot pallets for seven critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin checks. Use when auditing Substrate runtimes or FRAME pallets.

TON Vulnerability Scanner scans TON smart contracts written in FunC for critical vulnerabilities such as integer-as-boolean misuse, fake Jetton contracts, and improper gas handling. Use it when auditing or reviewing TON dApps for security issues before launch.

Token Integration Analyzer analyzes token implementations and integrations against Trail of Bits' token integration checklist. Use it to check ERC20/ERC721 conformity, weird token patterns, owner privileges, and on-chain scarcity.