Workflow

Trail of Bits Security Skills

Workflow for Claude Code by Trail of Bits, listed in awesome-claude-code under Security.

Source (opens in a new tab)

Checked 2026-10-31

Install

/plugin marketplace add trailofbits/skills

Commands come from the project's own docs or registry entry. Check them against the source before you run them.

Loading poll...

Trail of Bits publishes a set of skills for security research, vulnerability detection and audit workflows. The firm is a well-known security consultancy, and the repository is trailofbits/skills, with 7.9 thousand stars. Its licence is CC BY-SA 4.0, which is a share-alike licence meant for creative works, so check what it means for any skill text you copy into your own repository. The README installs it with /plugin marketplace add trailofbits/skills and gives a matching Codex command. We would recommend it to people doing code review or audits who want an agent that follows an audit method instead of a general checklist. Skills guide an agent but do not replace an auditor, and findings need confirming by hand before anyone reports them. Last push 28 October 2026. We have not run the skills against a codebase.

Mentioned here

Works with

Tried it with one of these? Vote below: works for me, or not.

Questions

How do I install Trail of Bits Security Skills?

Run this command: /plugin marketplace add trailofbits/skills. The install box on this page has the command for each agent it works with.

Is Trail of Bits Security Skills free?

It is published under the Other licence.

Who maintains Trail of Bits Security Skills?

It is maintained by Trail of Bits. The code is at github.com/trailofbits/skills.

Loading poll...

Reviews

Loading reviews…

Write a review

Your rating

Up to 1000 characters. Stars alone are enough.

Prompts that use it

All prompts

  • Plan Before Coding Prompt

    • By AI Agent Duo

    Tested with Claude Code 2.1.316 (Sonnet), 2026-10-31, sample project; not run in other agents

  • Code Review Subagent

    • By AI Agent Duo

    Tested with Claude Code 2.1.316 (Sonnet), 2026-10-31, sample project, invoked through the main session

  • Bug Triage Prompt

    • By AI Agent Duo

    Tested with Claude Code 2.1.316 (Sonnet), 2026-10-31, sample project; not run in other agents

  • PR Description Command

    • By AI Agent Duo

    Tested with Claude Code 2.1.316 (Sonnet), 2026-10-31, sample project, run as a command from .claude/commands/pr.md

Similar

  • Everything Claude Code (ECC)

    Everything Claude Code, shortened to ECC, calls itself an agent harness performance optimization system and bundles skills, memory, security checks and research-first development habits.

    • Workflow

    Affaan Mustafa · 293,389 stars

  • gstack

    gstack is Garry Tan's published Claude Code setup, described in the repository as 23 opinionated tools that act as CEO, designer, engineering manager, release manager, docs engineer and QA.

    • Workflow

    Garry Tan · 138,322 stars

  • Diagram Design

    Diagram Design is a skill for producing editorial-style diagrams as self-contained HTML and SVG, with 45 diagram types according to its description.

    • Workflow

    Cathryn Lavery · 63,253 stars

  • Claude Scientific Skills

    Scientific Agent Skills, listed here as Claude Scientific Skills, is a library of 177 ready-made skills plus more than 100 scientific databases, covering biology, chemistry, medicine and drug discovery, according to its README.

    • Workflow

    K-Dense · 55,403 stars

  • SuperClaude

    SuperClaude is a configuration framework for Claude Code that adds specialised commands, cognitive personas and development methodologies.

    • Workflow

    SuperClaude-Org · 23,916 stars

Part of the Wbcom Designs family

The all-in-one WordPress community stack

Also ours: wbcomdesigns.comvapvarun.combrndle.com