topskills
Browse Skills

trail-of-bits

Security audits run by a real security firm. CodeQL + Semgrep + audit workflows.

Score 0(?)VerifiedCodeby Trail of BitsSource
Verified for:

Install

$ npx skills add trailofbits/skills

Best for

Pre-release vulnerability scans, ongoing security review.

About this skill

CodeQL + Semgrep static analysis, vulnerability detection, audit workflows from a top-tier security firm.

CodeQLSemgrepAudit

Score breakdown

Score breakdown

rubric 1.0
Install count
0/20
Provenance
12.8/15
GitHub stars
0/15
Recency
6/10
Compatibility
6/10
Documentation depth
6.5/10
Install ergonomics
10/10
License
5/5
Verification freshness
3/5

Composite 0–100 score derived from 9 verifiable signals. See the rubric →

Related skills

Community

Kubernetes hardening by the book. NetworkPolicies, RBAC, OPA, service mesh.

KubernetesRBACOPA
Code
Verified

Real exploits, no false positives. 96.15% exploit success across 50+ vuln types.

PentestExploitationAction-taking
Code
Official

Structured PR reviews with severity-tagged findings — bugs, security, perf, style.

ReviewSecurityPR
Code

Skill FAQ

About trail-of-bits

What is the trail-of-bits skill?

CodeQL + Semgrep static analysis, vulnerability detection, audit workflows from a top-tier security firm.

Which agents does trail-of-bits work with?

Claude Code, Cursor, Codex CLI.

How do I install trail-of-bits?

Run `npx skills add trailofbits/skills` for Claude Code. See the install panel for per-agent commands.

Is trail-of-bits free to use?

Yes — trail-of-bits is open source (Apache-2.0).

Who maintains trail-of-bits?

trail-of-bits is published by Trail of Bits and was last updated on 2026-04-22.

What is trail-of-bits best for?

Pre-release vulnerability scans, ongoing security review.