Trail of BitsOfficial

@trailofbits on GitHub

Skills from Trail of Bits’s repositories that passed our trust, licence and security gates. Each keeps its author’s attribution.

Sources and trust

RepositoryTierVerdictAuthorshipCheckedSkills
trailofbits/skillsVendorApproved · created 2026-01-14, pushed 2026-11-06, 8061 starsWritten in-house2026-11-0796

Files are mirrored only where the licence allows redistribution; otherwise we link to the source.

96 published skills

  • Guidelines Advisor

    Trail of BitsOfficial

    A smart contract development advisor that audits codebases against established security and development guidelines.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0GitHub stars of the source repository8.1k
  • Token Integration Analyzer

    Trail of BitsOfficial

    A security analysis tool for auditing ERC20 and ERC721 token implementations and their integrations against known vulnerabilities.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0GitHub stars of the source repository8.1k
  • Trailmark Summary

    Trail of BitsOfficial

    Provides a rapid structural overview of a codebase by identifying languages, entry points, and dependencies.

    Software developmentClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0Low riskGitHub stars of the source repository8.1k
  • Yara Rule Authoring

    Trail of BitsOfficial

    A guide for authoring, reviewing, and optimizing YARA-X detection rules for malware identification.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0Medium riskHas scriptsGitHub stars of the source repository8.1k
  • Let Fate Decide

    Trail of BitsOfficial

    Injects entropy into decision-making for vague or casual user prompts using a 12-house Zodiac Tarot spread.

    Agent toolingClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0Low riskHas scriptsGitHub stars of the source repository8.1k
  • Sarif Parsing

    Trail of BitsOfficial

    Expert guidance and utilities for parsing, filtering, and integrating SARIF static analysis results.

    Software developmentClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0Low riskHas scriptsGitHub stars of the source repository8.1k
  • Skill Improver

    Trail of BitsOfficial

    An autonomous improvement loop that iteratively refines Claude Code skills until they pass quality reviews.

    Agent toolingClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0GitHub stars of the source repository8.1k
  • Code Maturity Assessor

    Trail of BitsOfficial

    A systematic framework for evaluating the maturity of smart contract and blockchain codebases.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0GitHub stars of the source repository8.1k
  • Graph Evolution

    Trail of BitsOfficial

    Analyze structural code evolution between snapshots to detect security-relevant changes like new attack paths and privilege boundary shifts.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0Low riskHas scriptsGitHub stars of the source repository8.1k
  • Codeql

    Trail of BitsOfficial

    Automated security vulnerability scanning using CodeQL interprocedural data flow and taint tracking analysis.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0Low riskHas scriptsGitHub stars of the source repository8.1k
  • Implement Patch

    Trail of BitsOfficial

    A structured workflow for implementing, testing, and documenting invariant-level bug fixes.

    Software developmentClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0GitHub stars of the source repository8.1k
  • Trailmark Finding Triage

    Trail of BitsOfficial

    Perform graph-assisted triage of security findings to determine reachability and prioritize exploit validation.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0Low riskHas scriptsGitHub stars of the source repository8.1k
  • Regression Hunt

    Trail of BitsOfficial

    A structured workflow for coordinating regression investigations across commits and pull requests.

    Software developmentClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0GitHub stars of the source repository8.1k
  • Audit Augmentation

    Trail of BitsOfficial

    Augment Trailmark code graphs with external security audit findings from SARIF, weAudit, and binary analysis exports.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0GitHub stars of the source repository8.1k
  • Secure Workflow Guide

    Trail of BitsOfficial

    A comprehensive 5-step security assessment workflow for smart contract development.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0GitHub stars of the source repository8.1k
  • Dwarf Expert

    Trail of BitsOfficial

    Expert guidance on analyzing, verifying, and programmatically parsing DWARF debug information in compiled binaries.

    Software developmentClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0GitHub stars of the source repository8.1k
  • Ossfuzz

    Trail of BitsOfficial

    A guide to enrolling open-source projects in Google's OSS-Fuzz service and managing fuzzing workflows locally.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0Low riskGitHub stars of the source repository8.1k
  • Interpreting Culture Index

    Trail of BitsOfficial

    A comprehensive framework for interpreting Culture Index behavioral assessments to support hiring, team management, and conflict resolution.

    Business and productivityClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0Medium riskHas scriptsGitHub stars of the source repository8.1k
  • Differential Review

    Trail of BitsOfficial

    A security-focused differential code review tool that analyzes changes, calculates blast radius, and generates detailed vulnerability reports.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0GitHub stars of the source repository8.1k
  • Substrate Vulnerability Scanner

    Trail of BitsOfficial

    A systematic security auditing tool for identifying critical vulnerabilities in Substrate and Polkadot runtime pallets.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0GitHub stars of the source repository8.1k
  • Testing Handbook Generator

    Trail of BitsOfficial

    Automates the generation and maintenance of Claude Code skills based on the Trail of Bits Testing Handbook.

    Agent toolingClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0GitHub stars of the source repository8.1k
  • Post Patch Validation

    Trail of BitsOfficial

    Validates security patches by executing reproducible baseline-versus-patched evidence to ensure fixes are correct and regression-free.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0Low riskHas scriptsGitHub stars of the source repository8.1k
  • Goal Prompt

    Trail of BitsOfficial

    Drafts and formats copy-paste-ready /goal commands for Claude Code and Codex to ensure precise, verifiable long-running agent tasks.

    Agent toolingClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0Low riskHas scriptsGitHub stars of the source repository8.1k
  • Constant Time Testing

    Trail of BitsOfficial

    A guide to detecting and mitigating timing side-channel vulnerabilities in cryptographic implementations.

    SecurityClaude CodeClaude appsOpenAI Codex+14 more
    CC-BY-SA-4.0GitHub stars of the source repository8.1k