AGENT SKILLS · ÉQUIPEMENT DE MISSION
Des Agent Skills utiles classés selon leur usage réel
Comparez les Skills vérifiés par fonction, contenu, installations et fiabilité de la source avant de les ajouter.
- PÉRIMÈTRE
- VÉRIFIÉ
- Skills
- 23 248
- dépôts
- 3589
- dernière synchronisation
- 4 nov. 2026
trailofbitscairo-vulnerability-scanner
Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address conversion problems, and signature replay. Use when auditing StarkNet projects.
- Installations / 1h
- 4
- GitHub Stars
- 7,7 k
- Mis à jour
- 20 oct.
trailofbitschrome-mcp-troubleshooting
Diagnose and fix Claude in Chrome MCP extension connectivity issues. Use when mcpclaude-in-chrome tools fail, return "Browser extension is not connected", or behave erratically.
- Installations / 1h
- 4
- GitHub Stars
- 7,7 k
- Mis à jour
- 20 oct.
trailofbitscode-improver
Runs an autonomous review-and-fix improvement loop over any code target — a skill, plugin, module, or directory — using a reviewer the user names: any installed skill or agent. Keeps a cross-round findings ledger, escalates when fixes stop converging, and guards scope mechanically. Use when asked to 'improve this code until review passes', 'run an improvement loop with ', or to iterate review-and-fix with a specific reviewer. For skills prefer the skill-improver entry; for a branch prefer pr-imp
- Installations / 1h
- 4
- GitHub Stars
- 7,7 k
- Mis à jour
- 20 oct.
trailofbitscodeql
Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "build codeql database", "SAST scan", "taint analysis", "dataflow analysis", or "find vulnerabilities in this repo". Covers Python, JavaScript/TypeScript, Go, Java/Kotlin, C/C++, C, Ruby, and Swift. Supports "run all" (security-and-quality + security-experimental) and "important only" (high-precision) scan modes, and creates data extension m
- Installations / 1h
- 4
- GitHub Stars
- 7,7 k
- Mis à jour
- 20 oct.
trailofbitsconstant-time-testing
Measures timing side channels in cryptographic implementations by running them, using dudect for statistical analysis and Timecop over Valgrind for dynamic tracing. Covers the formal, symbolic, dynamic, and statistical tool categories and how to read a result. Use when testing whether a running implementation is constant-time, measuring timing variance on a compiled binary, or investigating a suspected timing attack. Not for statically inspecting compiler output — the constant-time-analysis plug
- Installations / 1h
- 4
- GitHub Stars
- 7,7 k
- Mis à jour
- 20 oct.
trailofbitscosmos-vulnerability-scanner
Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence. 25 core + 16 IBC + 10 EVM + 3 CosmWasm patterns. Use when auditing custom x/ modules, reviewing IBC integrations, or assessing pre-launch chain security. Updated for SDK v0.53.x.
- Installations / 1h
- 4
- GitHub Stars
- 7,7 k
- Mis à jour
- 20 oct.
trailofbitscrypto-protocol-diagram
Extracts protocol message flow from source code, RFCs, academic papers, pseudocode, informal prose, ProVerif (.pv), or Tamarin (.spthy) models and generates Mermaid sequenceDiagrams with cryptographic annotations. Use when diagramming a crypto protocol, visualizing a handshake or key exchange flow, extracting message flow from a spec or RFC, diagramming a ProVerif or Tamarin model, or drawing sequence diagrams for TLS, Noise, Signal, X3DH, Double Ratchet, FROST, DH, or ECDH protocols.
- Installations / 1h
- 4
- GitHub Stars
- 7,7 k
- Mis à jour
- 20 oct.
trailofbitsdevcontainer-setup
Creates devcontainers with Claude Code, language-specific tooling (Python/Node/Rust/Go), and persistent volumes. Use when adding devcontainer support to a project, setting up isolated development environments, or configuring sandboxed Claude Code workspaces.
- Installations / 1h
- 4
- GitHub Stars
- 7,7 k
- Mis à jour
- 20 oct.
trailofbitsdiagramming-code
Generates Mermaid diagrams from Trailmark code graphs. Produces call graphs, class hierarchies, module dependency maps, containment diagrams, complexity heatmaps, and attack surface data flow visualizations. Use when visualizing code architecture, drawing call graphs, generating class diagrams, creating dependency maps, producing complexity heatmaps, or visualizing data flow and attack surface paths as Mermaid diagrams.
- Installations / 1h
- 4
- GitHub Stars
- 7,7 k
- Mis à jour
- 20 oct.
trailofbitsdwarf-expert
Analyzes DWARF debug information in compiled binaries. Use when inspecting .debug sections, DIE trees, or DWTAG/DWAT entries with dwarfdump/llvm-dwarfdump or readelf, verifying debug info with llvm-dwarfdump --verify, answering DWARF standard questions, or writing code that parses DWARF (libdwarf, pyelftools, gimli).
- Installations / 1h
- 4
- GitHub Stars
- 7,7 k
- Mis à jour
- 20 oct.
trailofbitsfuzzing-dictionary
Builds and applies fuzzing dictionaries so a fuzzer can produce the keywords, magic bytes, and tokens a target expects. Covers extracting tokens from source, headers, binaries, and specifications, dictionary syntax, and wiring one into libFuzzer or AFL++. Use when fuzzing a parser, protocol, or file format, when coverage stalls at input validation, or when a target compares against fixed strings.
- Installations / 1h
- 4
- GitHub Stars
- 7,7 k
- Mis à jour
- 20 oct.
trailofbitsfuzzing-obstacles
Patches past the barriers that stop a fuzzer making progress — checksum and hash verification, magic-value validation, time-based seeds, and other non-deterministic global state. Covers locating the blocking check, neutering it behind a fuzzing build flag, and avoiding the false positives a patch can introduce. Use when a fuzzer is stuck at validation, when coverage shows large regions behind a checksum, or when valid inputs are impractical to generate.
- Installations / 1h
- 4
- GitHub Stars
- 7,7 k
- Mis à jour
- 20 oct.
trailofbitsgenotoxic
Graph-informed mutation testing triage. Parses codebases with Trailmark, runs mutation testing and necessist, then uses survived mutants, unnecessary test statements, and call graph data to identify false positives, missing test coverage, and fuzzing targets. Use when triaging survived mutants, analyzing mutation testing results, identifying test gaps, finding fuzzing targets from weak tests, running mutation frameworks (including circomvent and cairo-mutants), or using necessist.
- Installations / 1h
- 4
- GitHub Stars
- 7,7 k
- Mis à jour
- 20 oct.
trailofbitsgithub-triage
Triages a repository's open GitHub issues and pull requests via the gh CLI. Optionally reviews and merges ready PRs — incrementally merging passing automated/bot PRs and maintainer-approved ones, and spawning review subagents for never-reviewed ones — then closes already-resolved issues with comments citing the resolving PR or commit, cross-links issues with their pending fix PRs, and assigns local-only priority and change-size estimates for everything outstanding. Use when triaging, grooming, o
- Installations / 1h
- 4
- GitHub Stars
- 7,7 k
- Mis à jour
- 20 oct.
trailofbitsgoal-prompt
Drafts copy-paste-ready /goal commands for goal mode in Claude Code and Codex. Use when the user asks to create, write, rewrite, improve, compress, clean up, or prepare a goal prompt, goal condition, /goal command, goal-mode objective, or copy-ready long-running task objective.
- Installations / 1h
- 4
- GitHub Stars
- 7,7 k
- Mis à jour
- 20 oct.
trailofbitsgraph-evolution
Compares Trailmark code graphs at two source code snapshots (git commits, tags, or directories) to surface security-relevant structural changes. Detects new attack paths, complexity shifts, blast radius growth, taint propagation changes, and privilege boundary modifications that text diffs miss. Use when comparing code between commits or tags, analyzing structural evolution, detecting attack surface growth, reviewing what changed between audit snapshots, or finding security-relevant changes that
- Installations / 1h
- 4
- GitHub Stars
- 7,7 k
- Mis à jour
- 20 oct.
trailofbitsharness-writing
Designs and improves fuzzing harnesses for C/C++ and Rust. Covers mapping raw bytes onto a target API, generating structured inputs, avoiding non-determinism and false crashes, and deciding what to fuzz together. Use when writing a first LLVMFuzzerTestOneInput or fuzztarget! harness, when a campaign finds nothing or reports crashes that will not reproduce, or when the target API needs structured rather than raw input.
- Installations / 1h
- 4
- GitHub Stars
- 7,7 k
- Mis à jour
- 20 oct.
trailofbitsinterpreting-culture-index
Interprets Culture Index (CI) surveys, behavioral profiles, and personality assessment data. Supports individual profile interpretation, team composition analysis (gas/brake/glue), burnout detection, profile comparison, hiring profiles, manager coaching, interview transcript analysis for trait prediction, candidate debrief, onboarding planning, and conflict mediation. Accepts extracted JSON or PDF input via OpenCV extraction script. Use when the user shares a Culture Index PDF or JSON profile, a
- Installations / 1h
- 4
- GitHub Stars
- 7,7 k
- Mis à jour
- 20 oct.
trailofbitslet-fate-decide
Draws the 12 Houses of the Zodiac Tarot spread to inject entropy into planning when prompts are vague, ambiguous, or casually delegated. Interprets the spread to guide next steps. Use when the user says 'let fate decide', 'YOLO', 'whatever', 'idk', or other nonchalant phrases, makes Yu-Gi-Oh references, or when you are about to arbitrarily pick between multiple reasonable approaches. Prefer over asking clarifying questions when the user's tone is casual or playful rather than precision-seeking.
- Installations / 1h
- 4
- GitHub Stars
- 7,7 k
- Mis à jour
- 20 oct.
trailofbitslibafl
Builds custom fuzzers with LibAFL, the modular Rust fuzzing library. Covers composing observers, feedbacks, mutators, schedulers, and executors into a fuzzer for targets the standard tools do not fit. Use when writing a bespoke fuzzer or mutator, fuzzing a non-standard target or architecture, implementing a fuzzing research idea, or when libFuzzer and AFL++ lack the control you need.
- Installations / 1h
- 4
- GitHub Stars
- 7,7 k
- Mis à jour
- 20 oct.
trailofbitsmermaid-to-proverif
Translates Mermaid sequenceDiagrams describing cryptographic protocols into ProVerif formal verification models (.pv files). Use when generating a ProVerif model, formally verifying a protocol, converting a Mermaid diagram to ProVerif, verifying protocol security properties (secrecy, authentication, forward secrecy), checking for replay attacks, or producing a .pv file from a sequence diagram.
- Installations / 1h
- 4
- GitHub Stars
- 7,7 k
- Mis à jour
- 20 oct.
trailofbitsmodern-cpp
Guides C++ code toward modern idioms (C++20/23/26). Use when writing new C++ code, modernizing legacy patterns, or working on security-critical C++. Replaces raw pointers with smart pointers, SFINAE with concepts, printf with std::print, error codes with std::expected.
- Installations / 1h
- 4
- GitHub Stars
- 7,7 k
- Mis à jour
- 20 oct.
trailofbitspr-improver
Runs an autonomous review-and-fix improvement loop over the current branch's changes until a PR review comes back clean, scoped mechanically to the directories the branch touched. Reviews are performed by an installed PR-review skill (default: pr-review-toolkit's review-pr). Use to fix review findings on a branch before opening or updating a pull request ('clean up this branch', 'fix this PR until review passes', 'run review-and-fix on my changes'). NOT for a one-time review — run the PR-review
- Installations / 1h
- 4
- GitHub Stars
- 7,7 k
- Mis à jour
- 20 oct.
trailofbitsreview-walkthrough
Generates an interactive HTML walkthrough for reviewing code changes. Use only when explicitly called.
- Installations / 1h
- 4
- GitHub Stars
- 7,7 k
- Mis à jour
- 20 oct.