Trail Of Bits Claude-code-config — Security skill for Claude Code
Opinionated production defaults from a top security firm: sandboxing, permissions, hooks, skills, MCP server configs.
How to install Trail Of Bits Claude-code-config
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open trailofbits/claude-code-config and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Trail Of Bits Claude-code-config does
Opinionated production defaults from a top security firm: sandboxing, permissions, hooks, skills, MCP server configs. The gold standard for secure setups.
One of 3 entries listed from trailofbits/claude-code-config. The repository README
describes the whole collection, not this skill — read it on GitHub.
Alternatives in Security
- Skills — Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows 4k ★
- Anthropic Cybersecurity Skills — 734+ structured cybersecurity skills for AI agents · MITRE ATT&CK mapped · agentskills.io open standard · Work 3.8k ★
- Claude Bootstrap — Opinionated project initialization with security-first guardrails, spec-driven atomic todos, LLM testing patte 536 ★
Related Skills
Claude Code Security Setup
A secure Claude Code setup from Trail of Bits that provides opinionated defaults, documentation, and workflows
Audit Claude Md
Audit all CLAUDE.md files against the gold standard and produce a gap report
Gold Audit
Measure the project against the gold-standard registry — level band + prioritized "what's missing" list, deter
Arckit.Agent Security
Design AI agent security — sandboxing, permissions, injection defences, output validation
Collomia
Collomia is a provider-neutral agentic coding agent for the terminal. Every model-proposed action passes throu
Vibe Secure
Security audit for AI-generated code. Catches hardcoded secrets, injection surfaces, auth gaps, and insecure d
Related Agents
Policy Agent
Creates secure Pundit authorization policies with comprehensive RSpec tests and scope restrictions. Use when a
Climate Mrv Reviewer
Climate measurement-reporting-verification (MRV) pre-implementation reviewer. Specialises in GHG Protocol Scop
Secure Defaults
Secure Defaults Agent (SSDF PW.9). Read-only. Verifies that security-relevant configuration introduced or chan