workersio

Convert sessions into reusable agents

Write Kani bounded model checker proofs for Solana and Rust programs

Structured Solana smart contract security audits

Structured EVM protocol and DeFi security audits

Verify, check, transform, and repair Lean 4 proofs using the Axiom (Axle) API and CLI

Benchmark any agent skill to measure whether it actually improves performance

Pentest Android apps on a rooted device with ADB, mitmproxy, Frida, and UI Automator

Coverage-guided fuzzing workflow for C/C++, Rust, and Go with deep audit context building

Local pentest sandbox for black-box, greybox, and white-box security audits inside a per-engagement Kali Docker container

Use the official Caido SDK from Codex to search HTTP history, replay and edit authenticated requests, manage scope and findings, and export local bug-bounty evidence.

Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations. Detects misconfigurations and attack vectors specific to Codex Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference when used in CI/CD pipelines.

Ask the minimum set of clarifying questions needed to avoid wrong work.

Build deep architectural context through ultra-granular code analysis before vulnerability hunting.

Comprehensive smart contract security toolkit based on Trail of Bits' Building Secure Contracts framework.

Search and extract data from Burp Suite project files (.burp) for use in Codex

A portable tool for detecting timing side-channel vulnerabilities in compiled cryptographic code. Analyzes assembly output from multiple compilers and architectures to detect instructions that could leak secret data through execution timing.

Interprets Culture Index survey results for individuals and teams.

Debug the Buttercup CRS (Cyber Reasoning System) running on Kubernetes.

Create pre-configured devcontainers with Codex and language-specific tooling.

Security-focused differential review of code changes with git history analysis and blast radius estimation.

Add dimensional annotations to codebases and detect dimensional bugs. Uses an annotation format inspired by Reserve Protocol's Solidity conventions, but applicable to any language or protocol performing numeric arithmetic with mixed units, precisions, or scaling factors.

Interact with and analyze DWARF debug files, understand the DWARF debug format/standard, and write code that parses DWARF data.

A Codex skill for systematically identifying **state-changing** entry points in smart contract codebases to guide security audits.

Scan Android APKs for Firebase security misconfigurations including open databases, exposed storage buckets, and authentication bypasses.

enforces systematic false positive verification when verifying suspected security bugs.

intercepts GitHub URL fetches and redirects Claude to use the authenticated gh CLI instead.

A Codex skill for safely cleaning up accumulated git worktrees and local branches.

Security skill for detecting insecure default configurations that create vulnerabilities when applications run with missing or incomplete configuration.

A Codex skill that draws Tarot cards using secrets to inject entropy into vague or underspecified planning decisions.

Modern Python tooling and best practices using uv, ruff, ty, and pytest. Based on patterns from trailofbits/cookiecutter-python.

Helps configure mewt or muton mutation testing campaigns — scoping targets, tuning timeouts, and optimizing long-running runs so you can execute mewt run or muton run with confidence.

Property-based testing guidance for multiple languages and smart contracts.

Generate a MacOS Seatbelt configuration that sandboxes the target with the minimum set of permissions necessary for it to operate normally.

Run code reviews using external LLM CLIs (OpenAI Codex, Google Gemini) on uncommitted changes, branch diffs, or specific commits.

Create production-quality Semgrep rules for detecting bug patterns and security vulnerabilities.

A Codex skill for porting existing Semgrep rules to new target languages with proper applicability analysis and test-driven validation.

Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes through developer confusion, laziness, or malice.

Iteratively reviews and fixes Codex skill quality issues until they meet standards. Runs automated fix-review cycles using the skill-reviewer agent from the plugin-dev plugin.

Specification-to-code compliance checker for blockchain audits with evidence-based alignment analysis.

A comprehensive static analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection.

Generate a report on the supply-chain threat landscape of a project's direct dependencies, considering factors like popularity, number of maintainers, CVE history, and frequency of maintenance. Flag dependencies that have high-risk factors and suggest alternatives if any are available.

Meta-skill that generates Codex skills from the Trail of Bits Application Security Testing Handbook.

**Source code graph analysis for security auditing.** Parses code into queryable graphs of functions, classes, and calls, then uses that structure for diagram generation, mutation testing triage, protocol verification, and differential review.

Find similar vulnerabilities and bugs across codebases using pattern-based analysis.

teaches design patterns for building workflow-based skills and provides a review agent for auditing existing skills.

A behavior-driven skill for authoring high-quality YARA-X detection rules, teaching you to think and act like an expert YARA author.

Audits C/C++/Rust code for missing zeroization and compiler-removed wipes. Pipeline: source scan → MCP/LSP semantic context → IR diff → assembly/MIR checks.

Standardized bounty hunting workflows for web, Android, smart contract, and native targets using Codex-ready security skills from this repo.

Bootstrap web, whitebox, Android, smart-contract, or native bounty targets from a program URL with rendered scope capture, source pull, lane fingerprinting, and environment readiness handoff.

Inspect live bug bounty forms or webmail with Playwright MCP, then draft and deliver self-contained, target-specific evidence-backed reports with runnable PoCs, decisive output, mandatory asciinema replay links, and secret-gist proof packs when field limits would hide replay details.