EXPLORE COMPONENTS

debuggingroot-causetroubleshooting

Jesse Vincent

91/100

Four-phase root cause analysis — tracing, defense-in-depth, verification.

Mar 1, 2026261.7kTry Live

Agentic Actions Auditor

skilltrail-of-bitsagentic+2

Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemi...

C/C++ Security Review

Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-spe...

skilltrail-of-bitsreview

Semgrep Analysis

skilltrail-of-bitsstatic-analysis+2

Run Semgrep static analysis scan on a codebase using parallel subagents. Supports two scan modes — "run all" (full rules...

Static Analysis Skill

Feb 20, 20266.3k4 recipesTry Live

Runs CodeQL and Semgrep for automated security vulnerability detection in codebases.

codeqlsemgrepsast+1

YARA Rule Authoring

Author, test, and refine YARA rules for malware, exploit, and artifact detection while minimizing false positives.

skilltrail-of-bitsyara+2

Claude Blog Skill

AgriciDaniel

A comprehensive Claude Code skill ecosystem for end-to-end blog management: strategy, briefs, calendars, writing, SEO op...

blogwritingseo+1

Jun 13, 20261.5k

CodeQL Analysis

skilltrail-of-bitsstatic-analysis+2

Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Trig...

Constant Time Analysis

skilltrail-of-bitsconstant+2

Detects timing side-channel vulnerabilities in cryptographic code. Use when implementing or reviewing crypto code, encou...

Variant Analysis

skilltrail-of-bitsvariant+1

Find similar vulnerabilities and bugs across codebases using pattern-based analysis. Use when hunting bug variants, buil...

Trail of Bits Skills

security-auditvulnerabilitybinary-analysis+1

Security audit skill collection from Trail of Bits covering vulnerability detection, binary analysis, SAST, and secure c...

Mar 25, 20266.3kTry Live

Planning with Files

Othman Adi

planningtask-managementmarkdown

Structured task planning skill that uses markdown files for persistent plan tracking, progress updates, and subtask deco...

Mar 25, 202625.8k1 recipeTry Live

SARIF Parsing

skilltrail-of-bitsstatic-analysis+3

Parses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other scanners. Triggers on "parse...

Dimensional Analysis

skilltrail-of-bitsdimensional+1

Annotates codebases with dimensional analysis comments documenting units, dimensions, and decimal scaling. Use when some...

Obsidian Skills

Steph Ango

obsidianknowledge-managementmarkdown+2

Pure markdown knowledge management skills from the Obsidian CEO for working with vaults, note linking, tagging, and pers...

Mar 25, 202643.4kTry Live

Spec To Code Compliance

Verifies code implements exactly what documentation specifies for blockchain audits. Use when comparing code against whi...

skilltrail-of-bitsspec+2

Burpsuite Project Parser

skilltrail-of-bitsburpsuite+2

Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bod...

Seatbelt Sandboxer

skilltrail-of-bitsseatbelt+1

Generates minimal macOS Seatbelt sandbox configurations. Use when sandboxing, isolating, or restricting macOS applicatio...

Sharp Edges

skilltrail-of-bitssharp+1

Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when revie...

Fuzz Harness Writing

skilltrail-of-bitsfuzzing+4

87/100

Write targeted fuzz harnesses that isolate parsers, state machines, and security-sensitive APIs without hiding bugs behi...