trail-of-bits
Security audits run by a real security firm. CodeQL + Semgrep + audit workflows.
Verified for:
Install
$ npx skills add trailofbits/skillsBest for
Pre-release vulnerability scans, ongoing security review.
About this skill
CodeQL + Semgrep static analysis, vulnerability detection, audit workflows from a top-tier security firm.
CodeQLSemgrepAudit
Score breakdown
Score breakdown
rubric 1.0Install count
0/20
Provenance
12.8/15
GitHub stars
0/15
Recency
8.5/10
Compatibility
6/10
Documentation depth
6.5/10
Install ergonomics
10/10
License
5/5
Verification freshness
4.3/5
Composite 0–100 score derived from 9 verifiable signals. See the rubric →
Related skills
Community
Kubernetes hardening by the book. NetworkPolicies, RBAC, OPA, service mesh.
KubernetesRBACOPA
Real exploits, no false positives. 96.15% exploit success across 50+ vuln types.
PentestExploitationAction-taking
Code
High15 min
Official
Structured PR reviews with severity-tagged findings — bugs, security, perf, style.
ReviewSecurityPR
Code
Low0 min