Skills — Security skill for Claude Code
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows.
How to install Skills
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open trailofbits/skills and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Skills does
(1.3k ⭐): Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows.
One of 13 entries listed from trailofbits/skills. The repository README
describes the whole collection, not this skill — read it on GitHub.
Alternatives in Security
- Trail Of Bits Claude-code-config — Opinionated production defaults from a top security firm: sandboxing, permissions, hooks, skills, MCP server c 1.6k ★
- Clawsec — Security skill suite with drift detection, automated audits, and skill integrity verification 798 ★
- Perplexity Super Skills — Complete collection of 12 Perplexity Computer Super-Skills merging Perplexity + Claude Code capabilities acros 346 ★
Repository README
This is the README for trailofbits/skills, shared by 13 entries
in this directory. It describes the repository, not this entry specifically.
Trail of Bits Skills Marketplace
A Claude Code plugin marketplace from Trail of Bits providing skills to enhance AI-assisted security analysis, testing, and development workflows.
Also see: [claude-code-config](https://github.com/trailofbits/claude-code-config) · [skills-curated](https://github.com/trailofbits/skills-curated) · [claude-code-devcontainer](https://github.com/trailofbits/claude-code-devcontainer) · [dropkit](https://github.com/trailofbits/dropkit)
Installation
Claude Code Marketplace
/plugin marketplace add trailofbits/skills
Browse and Install Plugins
/plugin menu
Codex
Codex-native skill discovery is supported via the sidecar `.codex/skills/` tree in this repository.
Install with:
git clone https://github.com/trailofbits/skills.git ~/.codex/trailofbits-skills
~/.codex/trailofbits-skills/.codex/scripts/install-for-codex.sh
See [`.codex/INSTALL.md`](.codex/INSTALL.md) for additional details.
Local Development
To add the marketplace locally (e.g., for testing or development), navigate to the **parent directory** of this repository:
cd /path/to/parent # e.g., if repo is at ~/projects/skills, be in ~/projects
/plugins marketplace add ./skills
Available Plugins
Smart Contract Security
| Plugin | Description |
|---|---|
| building-secure-contracts | Smart contract security toolkit with vulnerability scanners for 6 blockchains |
| entry-point-analyzer | Identify state-changing entry points in smart contracts for security auditing |
Code Auditing
| Plugin | Description |
|---|---|
| agentic-actions-auditor | Audit GitHub Actions workflows for AI agent security vulnerabilities |
| audit-context-building | Build deep architectural context through ultra-granular code analysis |
...
Related Skills
Trail Of Bits Skills
Security research skills for Claude Code: vulnerability detection and audit workflows from Trail of Bits.
Axton Obsidian Visual Skills
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows.
Claude Code Security Setup
A secure Claude Code setup from Trail of Bits that provides opinionated defaults, documentation, and workflows
Claude Security Research Skill
AI-powered security research assistant for Claude Code — structured assessment workflows, tool orchestration,
Secure
Security analysis and vulnerability detection with threat intelligence learning
Bugbounty Cybersec AI Agent Resources
Research archive & knowledge base for building an autonomous bug bounty / vulnerability discovery AI agent. Cu
Related Agents
Audit Logs
Query and manage Datadog Audit Trail events for compliance, security auditing, and tracking user actions acros
Security Sast
Static Application Security Testing (SAST) for comprehensive code vulnerability detection across mul... - wsho
Security Auditor Agent
You are a security engineer specializing in application security, vulnerability detection, and secure coding p