EXPLORE COMPONENTS

Runs CodeQL and Semgrep for automated security vulnerability detection in codebases.

CodeQL Analysis

skilltrail-of-bitsstatic-analysis+2

Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Trig...

Semgrep Analysis

skilltrail-of-bitsstatic-analysis+2

Run Semgrep static analysis scan on a codebase using parallel subagents. Supports two scan modes — "run all" (full rules...

Trail of Bits Skills

security-auditvulnerabilitybinary-analysis+1

Security audit skill collection from Trail of Bits covering vulnerability detection, binary analysis, SAST, and secure c...

Mar 25, 2026

3.9k

SARIF Parsing

skilltrail-of-bitsstatic-analysis+3

88/100

Parses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other scanners. Triggers on "parse...

Differential Review Skill

87/100

Security-focused review of code changes using git history analysis to find regressions.

Algorand Vulnerability Scanner

Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees, mis...

Cairo Vulnerability Scanner

Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messagi...

Secure Workflow Guide

Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeab...

Ton Vulnerability Scanner

Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Je...

Cosmos Vulnerability Scanner

Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund lo...

Solana Vulnerability Scanner

Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ow...

Substrate Vulnerability Scanner

Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weig...

Understand Anything

codebase-analysisknowledge-graphvisualization

Lum1104

85/100

Codebase analysis skill that generates knowledge graphs and visual dependency maps to help understand unfamiliar reposit...

Mar 25, 2026

Secrets Detection Skill

secretscredentialsapi-keys+2

CldKit Team

85/100

Scans codebases for exposed secrets, API keys, credentials, and sensitive data.

Mar 10, 2026

Review soon

3 recipes

Firebase APK Scanner

skilltrail-of-bitsfirebase+2

84/100

Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication iss...

developmentdevinder1tridentchain+2

TridentChain Security

MCP

DevInder1

82/100

Local supply-chain CVE scanner via OSV/NVD. Scans deps and IDE extensions. No upload.

developmentqualitycloudslivecheck+2

LiveCheck AI

MCP

Qualityclouds

82/100

Secure MCP runtime server for scanning and autofixing code issues

Cartographer

codebase-mappingdocumentationsubagents

kingbootoshi

80/100

Codebase mapping skill that scans repositories and generates structured documentation of file relationships, module boun...

Mar 25, 2026

524

Accessibility Audit Skill