Browse
Showing 20 of 124 components
Design high-value fuzzing dictionaries for structured inputs, parsers, protocols, file formats, and smart contract ABI s...
Test cryptographic implementations for timing leaks with dudect-style workflows, leakage hypotheses, and reproducible me...
Use Atheris to fuzz Python code and native extension boundaries with coverage-guided tests, useful inputs, and reproduci...
Set up cargo-fuzz for Rust crates, write effective fuzz targets, manage corpora, and triage panics or sanitizer crashes.
Security-focused review of code changes using git history analysis to find regressions.
Write targeted fuzz harnesses that isolate parsers, state machines, and security-sensitive APIs without hiding bugs behi...
Configure and run AFL++ fuzzing campaigns for C/C++ targets, including harness setup, corpus handling, dictionaries, par...
Build libFuzzer harnesses for C/C++ libraries, configure sanitizers and corpora, and turn crashes into minimized reprodu...
Use AddressSanitizer to find memory corruption bugs, configure instrumented builds, interpret sanitizer reports, and tur...
Prepare OSS-Fuzz integrations with build scripts, fuzz targets, seed corpora, dictionaries, and project metadata for con...
Token integration and implementation analyzer based on Trail of Bits' token integration checklist. Analyzes token implem...
Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, mis...
Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weig...
Systematic code maturity assessment using Trail of Bits' 9-category framework. Analyzes codebase for arithmetic safety,...
Smart contract development advisor based on Trail of Bits' best practices. Analyzes codebase to generate documentation/s...
Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tool...
Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund lo...
Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ow...
Heads-up display skill that shows real-time context window usage, token counts, and session metadata in a compact dashbo...
Claude Code and Codex skill that compresses agent communication into terse, high-signal output to reduce token usage whi...