Search everything...

Stats

Actions

Available In

testing-handbook-skills

Skills from the Trail of Bits Application Security Testing Handbook (appsec.guide)

Publisher marketplacetesting-handbook-skills@trailofbits · marketplace and plugin share one repository (razor-ai/trailofbits-skills)

npx claudepluginhub razor-ai/trailofbits-skills --plugin testing-handbook-skills

Popularity

Stars

Med: 0·Avg: 488

Copy clicks

Med: 0·Avg: 1

What's Inside

Skills17

fuzzing-obstacles

/fuzzing-obstacles

Techniques for patching code to overcome fuzzing obstacles. Use when checksums, global state, or other barriers block fuzzer progress.

address-sanitizer

/address-sanitizer

AddressSanitizer detects memory errors during fuzzing. Use when fuzzing C/C++ code to find buffer overflows and use-after-free bugs.

aflpp

/aflpp

AFL++ is a fork of AFL with better fuzzing performance and advanced features. Use for multi-core fuzzing of C/C++ projects.

atheris

/atheris

Atheris is a coverage-guided Python fuzzer based on libFuzzer. Use for fuzzing pure Python code and Python C extensions.

cargo-fuzz

/cargo-fuzz

cargo-fuzz is the de facto fuzzing tool for Rust projects using Cargo. Use for fuzzing Rust code with libFuzzer backend.

Stats

Version1.0.0

Stars0

MaintenancePoor

LicenseCC-BY-SA-4.0

Last CommitJan 21, 2026

AddedJul 18, 2026

Actions

View on GitHub View README Plugin Marketplace JSON

Own this plugin?

Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).

Available In

trailofbits

README

Trail of Bits Skills Marketplace

A Claude Code plugin marketplace from Trail of Bits providing skills to enhance AI-assisted security analysis, testing, and development workflows.

Installation

Add the Marketplace

/plugin marketplace add trailofbits/skills

Browse and Install Plugins

/plugin menu

Local Development

To add the marketplace locally (e.g., for testing or development), navigate to the parent directory of this repository:

cd /path/to/parent  # e.g., if repo is at ~/projects/skills, be in ~/projects
/plugins marketplace add ./skills

Available Plugins

Smart Contract Security

Plugin	Description
building-secure-contracts	Smart contract security toolkit with vulnerability scanners for 6 blockchains
entry-point-analyzer	Identify state-changing entry points in smart contracts for security auditing

Code Auditing

Plugin	Description
audit-context-building	Build deep architectural context through ultra-granular code analysis
burpsuite-project-parser	Search and extract data from Burp Suite project files
differential-review	Security-focused differential review of code changes with git history analysis
semgrep-rule-creator	Create and refine Semgrep rules for custom vulnerability detection
semgrep-rule-variant-creator	Port existing Semgrep rules to new target languages with test-driven validation
sharp-edges	Identify error-prone APIs, dangerous configurations, and footgun designs
static-analysis	Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing
testing-handbook-skills	Skills from the Testing Handbook: fuzzers, static analysis, sanitizers, coverage
variant-analysis	Find similar vulnerabilities across codebases using pattern-based analysis

Verification

Plugin	Description
constant-time-analysis	Detect compiler-induced timing side-channels in cryptographic code
property-based-testing	Property-based testing guidance for multiple languages and smart contracts
spec-to-code-compliance	Specification-to-code compliance checker for blockchain audits

Audit Lifecycle

Plugin	Description
fix-review	Verify fix commits address audit findings without introducing bugs

Reverse Engineering

Plugin	Description
dwarf-expert	Interact with and understand the DWARF debugging format

Mobile Security

Plugin	Description
firebase-apk-scanner	Scan Android APKs for Firebase security misconfigurations

Development

Plugin	Description
ask-questions-if-underspecified	Clarify requirements before implementing

Team Management

Plugin	Description
culture-index	Interpret Culture Index survey results for individuals and teams

Trophy Case

Bugs discovered using Trail of Bits Skills. Found something? Let us know!

When reporting bugs you've found, feel free to mention:

Found using Trail of Bits Skills

Skill	Bug
constant-time-analysis	Timing side-channel in ECDSA verification

Contributing

We welcome contributions! Please see CLAUDE.md for skill authoring guidelines.

License

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.

About Trail of Bits

Trail of Bits is a security research and consulting firm.

Similar Plugins

fullstack-dev-skills

10.6k·702·

Comprehensive skill pack with 66 specialized skills for full-stack developers: 12 language experts (Python, TypeScript, Go, Rust, C++, Swift, Kotlin, C#, PHP, Java, SQL, JavaScript), 10 backend frameworks, 6 frontend/mobile, plus infrastructure, DevOps, security, and testing. Features progressive disclosure architecture for 50% faster loading.

1mo

v0.4.15

Jeffallan

nature-skills

20.0k·420·

A growing collection of Claude-compatible academic workflow bundles. Covers scientific figures, manuscript writing and polishing, reviewer assessment, citation retrieval, data availability, paper reading, literature search, response letters, paper-to-PPTX conversion, and evidence-grounded Chinese invention patent drafting. Rules are organized as reusable skill folders with explicit workflows and quality checks.

v1.0.0

Yuan1z0825

creative-writing

28·90·

Complete creative writing suite with 10 specialized agents covering the full writing process: research gathering, character development, story architecture, world-building, dialogue coaching, editing/review, outlining, content strategy, believability auditing, and prose style/voice analysis. Includes genre-specific guides, templates, and quality checklists.

5mo

v1.7.0

greyhaven-ai

dotnet-skills

32·70·

Comprehensive .NET development skills for modern C#, ASP.NET, MAUI, Blazor, Aspire, EF Core, Native AOT, testing, security, performance optimization, CI/CD, and cloud-native applications

4mo

v2.0.0

wshaddix

ecc

230.8k·4.2K·

Harness-native ECC operator layer - 67 agents, 278 skills, 94 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

v2.0.0

affaan-m

ponytail

85.3k·3.2K·

Lazy senior dev mode. Forces the simplest, shortest solution that actually works: YAGNI, stdlib first, no unrequested abstractions.

v4.8.4

DietrichGebert

testing-handbook-skills

Popularity

What's Inside

Confidence

README

Trail of Bits Skills Marketplace

Installation

Add the Marketplace

Browse and Install Plugins

Local Development

Available Plugins

Smart Contract Security

Code Auditing

Verification

Audit Lifecycle

Reverse Engineering

Mobile Security

Development

Team Management

Trophy Case

Contributing

License

About Trail of Bits

Similar Plugins

fullstack-dev-skills

nature-skills

creative-writing

dotnet-skills

ecc

ponytail

More by razor-ai

adversarial-spec

actionbook

gepa-observable-migration

safety-net

project-starter

Trail of Bits Skills Marketplace

Installation

Add the Marketplace

Browse and Install Plugins

Local Development

Available Plugins

Smart Contract Security

Code Auditing

Verification

Audit Lifecycle

Reverse Engineering

Mobile Security

Development

Team Management

Trophy Case

Contributing

License

About Trail of Bits

Popularity

Health & Quality

More by razor-ai

adversarial-spec

actionbook

gepa-observable-migration

safety-net

project-starter

Similar Plugins

fullstack-dev-skills

nature-skills

creative-writing

dotnet-skills

ecc

ponytail