Insecure Defaults
84/100
@trailofbitsDetects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or analyzing environment variable handling.
Reviewed on v2026-05-16 - latest is v0.3.1. Scores may not reflect the current version.
Review Scores
Security31/35
Maintain.29/35
Usability24/30
Evidence:
high
Reviewed May 27, 2026Drifted
Reviewed Version
2026-05-16
Latest Version
0.3.1(drift)
Freshness
Reviewed on 2026-05-16; latest is 0.3.1.
Scores reflect the version reviewed and may change with updates.
Security Audit - No Flags Reported
Audited May 27, 2026Source is the public Trail of Bits skills repository. Curated entry preserves original SKILL.md content and avoids automatic tool execution during install.
More by Trail of Bits
- Agentic Actions AuditorSkill90/100
- C/C++ Security ReviewSkill90/100
- Static Analysis SkillSkill90/100
- Constant Time AnalysisSkill90/100