Trail of Bits claude-code-config

Trail of Bits Claude Code Config

Opinionated defaults, documentation, and workflows for Claude Code at Trail of Bits. Covers sandboxing, permissions, hooks, skills, MCP servers, and usage patterns we've found effective across security audits, development, and research.

Also see: [skills](https://github.com/trailofbits/skills) · [skills-curated](https://github.com/trailofbits/skills-curated) · [claude-code-devcontainer](https://github.com/trailofbits/claude-code-devcontainer) · [dropkit](https://github.com/trailofbits/dropkit)

**First-time setup:**

git clone https://github.com/trailofbits/claude-code-config.git
cd claude-code-config
claude

Then inside the session, run `/trailofbits:config`. It walks you through installing each component, detects what you already have, and self-installs the command so future runs work from any directory. Run `/trailofbits:config` again after updates.

Contents

**[Getting Started](#getting-started)**

• Read These First
• Prerequisites
• Shell Setup
• Settings
• Global CLAUDE.md

**[Configuration](#configuration)**

• Sandboxing
• Hooks
• Plugins and Skills
• MCP Servers
• Local Models
• Personalization

**[Usage](#usage)**

• Continuous Improvement
• Project-level CLAUDE.md
• Context Management
• Web Browsing
• Fast Mode
• Commands
• Writing Skills and Agents
• Recommended Skills
• Recommended MCP Servers

Getting Started

Read These First

Before configuring anything, read these to understand the context for why this setup works the way it does:

...