audit-context-building

Trail of Bits Skills Marketplace

A Claude Code plugin marketplace from Trail of Bits providing skills to enhance AI-assisted security analysis, testing, and development workflows.

Installation

Add the Marketplace

/plugin marketplace add trailofbits/skills

Browse and Install Plugins

/plugin menu

Local Development

To add the marketplace locally (e.g., for testing or development), navigate to the parent directory of this repository:

cd /path/to/parent  # e.g., if repo is at ~/projects/skills, be in ~/projects
/plugins marketplace add ./skills

Available Plugins

Smart Contract Security

Plugin	Description
building-secure-contracts	Smart contract security toolkit with vulnerability scanners for 6 blockchains
entry-point-analyzer	Identify state-changing entry points in smart contracts for security auditing

Code Auditing

Plugin	Description
audit-context-building	Build deep architectural context through ultra-granular code analysis
burpsuite-project-parser	Search and extract data from Burp Suite project files
differential-review	Security-focused differential review of code changes with git history analysis
semgrep-rule-creator	Create and refine Semgrep rules for custom vulnerability detection
sharp-edges	Identify error-prone APIs, dangerous configurations, and footgun designs
testing-handbook-skills	Skills from the Testing Handbook: fuzzers, static analysis, sanitizers, coverage
variant-analysis	Find similar vulnerabilities across codebases using pattern-based analysis

Verification

Plugin	Description
constant-time-analysis	Detect compiler-induced timing side-channels in cryptographic code
property-based-testing	Property-based testing guidance for multiple languages and smart contracts
spec-to-code-compliance	Specification-to-code compliance checker for blockchain audits

Audit Lifecycle

Plugin	Description
fix-review	Verify fix commits address audit findings without introducing bugs

Reverse Engineering

Plugin	Description
dwarf-expert	Interact with and understand the DWARF debugging format

Development

Plugin	Description
ask-questions-if-underspecified	Clarify requirements before implementing

Team Management

Plugin	Description
culture-index	Interpret Culture Index survey results for individuals and teams

Contributing

We welcome contributions! Please see CLAUDE.md for skill authoring guidelines.

License

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.

About Trail of Bits

Trail of Bits is a security research and consulting firm.