A specialist collection of skills and plugins for security analysis, vulnerability validation, and regression testing
Plugins from respected security firm Trail of Bits: smart contracts, C/C++/Rust, static analysis, Semgrep/CodeQL, supply chain risk, fuzzing, malware/YARA, mobile APKs, and reverse engineering. Includes supervised workflows such as false-positive validation, variant analysis, diff review, and patch validation; the firm's domain reputation provides greater content confidence than hundreds of generic cybersecurity skills.
Teams conducting security code reviews, vulnerability triage, smart contract audits, and security regression testing; pair with REA (extract artifacts first, then validate with a specialist).
The CC-BY-SA license does not have the same redistribution terms as MIT/Apache. CodeQL, Semgrep, and fuzzing tools must be installed separately.
/plugin marketplace add trailofbits/skills /plugin install static-analysis@trailofbits