Browse Skills

Chrome MCP Troubleshooting diagnoses and fixes connectivity issues with the Claude in Chrome MCP extension when tools fail or report 'Browser extension is not connected'. Use it to resolve conflicts between Claude.app Cowork and Claude Code CLI native hosts on macOS.

Code Maturity Assessor evaluates codebases across 9 security and quality categories using Trail of Bits' framework, producing evidence-based ratings and actionable recommendations.

Constant-Time Analysis detects timing side-channel vulnerabilities in cryptographic code by statically inspecting compiled output for variable-time instructions. Use it when implementing or reviewing crypto routines, division on secrets, or secret-dependent branches.

Cosmos Vulnerability Scanner scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities such as chain halts, fund loss, and state divergence. Use it when auditing custom x/ modules, reviewing IBC integrations, or assessing pre-launch chain security.

Devcontainer Setup creates pre-configured devcontainers with Claude Code, language-specific tooling (Python/Node/Rust/Go), and persistent volumes. Use when adding devcontainer support to a project or configuring sandboxed Claude Code workspaces.

Differential Security Review performs security-focused review of pull requests, commits, and diffs, adapting depth to codebase size. It uses git history for context, calculates blast radius, checks test coverage, and generates comprehensive markdown reports to prevent security regressions.

Dimensional Analysis annotates codebases with unit and dimension comments, then propagates and validates them to catch formula bugs early. Use when auditing DeFi protocols, blockchain code, or other arithmetic-heavy code.

DWARF Expert analyzes DWARF debug information in compiled binaries. Use it when inspecting .debug_* sections, verifying debug info integrity, or writing code that parses DWARF.

Entry Point Analyzer identifies state-changing entry points in smart contract codebases for security auditing. Use it to map attack surfaces, classify access control, and generate structured audit reports for Solidity, Vyper, Solana, Move, TON, and CosmWasm.

False Positive Check systematically verifies suspected security bugs to determine if they are true positives or false positives, producing documented evidence for each verdict. Use it when asked to confirm whether a specific finding is real or exploitable.

Firebase APK Scanner scans Android APKs for Firebase security misconfigurations, including open databases, storage buckets, authentication issues, and exposed cloud functions. Use it during authorized mobile app security audits or Firebase endpoint testing.

Guidelines Advisor analyzes smart contract codebases based on Trail of Bits' best practices to generate documentation, review architecture, upgradeability, implementation quality, dependencies, and testing. It provides prioritized actionable recommendations for developers improving contract security.