Discover the toolingbehind modern intelligence
The operating system for AI infrastructure discovery. Search a live map of MCP servers, AI agents, LLM tools, automation systems, and developer infrastructure.
skills
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
5.6kstars
484forks
Python
agent-skills
Quality signals
ActiveNo testsNo CIThin docsNo licensePopular
AI summary
Auto-generated overview of what this skill does and when to reach for it.
A marketplace of AI-assisted security analysis skills for developers, auditors, and researchers to automate vulnerability detection and code review tasks.
Use this when
- Auditing smart contracts for vulnerabilities across multiple blockchains
- Detecting insecure defaults or hardcoded secrets in codebases
- Running static analysis with CodeQL/Semgrep and parsing SARIF outputs
- Generating YARA rules for malware detection with best practices
- Performing differential security reviews between code versions
Don't use when
- Need general-purpose code refactoring without security focus
- Looking for non-security-related code quality tools
- Want to run these skills without a compatible AI assistant (Claude Code/Codex)
Capabilities
- Smart contract vulnerability scanners for 6+ blockchains
- Semgrep/CodeQL static analysis with SARIF output parsing
- YARA rule authoring with linting and atom analysis
- Differential security review comparing code changes with git history
- Supply chain dependency threat analysis for projects
- DWARF debugging format interaction for reverse engineering
InstallMCP + SKILLInstall as a Claude Code skill
Universal installANY TOOL
$ npx skillcity@latest trailofbits/skillsAuto-detects the skill or MCP server in this repo and installs it for Claude Code, Codex, Cursor, Cline, OpenCode, Gemini CLI, Anti-Gravity, OpenClaw and Hermes.
Requires Node.js 18+ (ships with npx).
Or install manually
# Install into ~/.claude/skills/ mkdir -p ~/.claude/skills/skills curl -fsSL https://raw.githubusercontent.com/trailofbits/skills/main/SKILL.md -o ~/.claude/skills/skills/SKILL.md
Loading README…
Ask a simulated agent to run this skill. It loads the real SKILL.md and reasons over your task with NVIDIA.
skills — sandboxAI sandbox
Pick a quick prompt below or type your own — watch the agent execute this skill step by step.
guest@skillcity:~$Try a prompt