AGENT SKILLS · 임무 장비
실제 사용량으로 검증된 유용한 Agent Skills
공개 저장소의 검증된 Skills를 기능, 패키지 구성, 설치 수, 출처 근거에 따라 비교할 수 있습니다.
- 카탈로그 범위
- 검증 완료
- Skills
- 23,248
- 저장소
- 3589
- 최근 동기화
- 2026. 11. 4.
trailofbitscairo-vulnerability-scanner
Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2 messaging issues, address conversion problems, and signature replay. Use when auditing StarkNet projects.
- 1시간 설치 수
- 4
- GitHub Stars
- 7.7천
- 업데이트
- 10월 20일
trailofbitschrome-mcp-troubleshooting
Diagnose and fix Claude in Chrome MCP extension connectivity issues. Use when mcpclaude-in-chrome tools fail, return "Browser extension is not connected", or behave erratically.
- 1시간 설치 수
- 4
- GitHub Stars
- 7.7천
- 업데이트
- 10월 20일
trailofbitscode-improver
Runs an autonomous review-and-fix improvement loop over any code target — a skill, plugin, module, or directory — using a reviewer the user names: any installed skill or agent. Keeps a cross-round findings ledger, escalates when fixes stop converging, and guards scope mechanically. Use when asked to 'improve this code until review passes', 'run an improvement loop with ', or to iterate review-and-fix with a specific reviewer. For skills prefer the skill-improver entry; for a branch prefer pr-imp
- 1시간 설치 수
- 4
- GitHub Stars
- 7.7천
- 업데이트
- 10월 20일
trailofbitscodeql
Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "build codeql database", "SAST scan", "taint analysis", "dataflow analysis", or "find vulnerabilities in this repo". Covers Python, JavaScript/TypeScript, Go, Java/Kotlin, C/C++, C, Ruby, and Swift. Supports "run all" (security-and-quality + security-experimental) and "important only" (high-precision) scan modes, and creates data extension m
- 1시간 설치 수
- 4
- GitHub Stars
- 7.7천
- 업데이트
- 10월 20일
trailofbitsconstant-time-testing
Measures timing side channels in cryptographic implementations by running them, using dudect for statistical analysis and Timecop over Valgrind for dynamic tracing. Covers the formal, symbolic, dynamic, and statistical tool categories and how to read a result. Use when testing whether a running implementation is constant-time, measuring timing variance on a compiled binary, or investigating a suspected timing attack. Not for statically inspecting compiler output — the constant-time-analysis plug
- 1시간 설치 수
- 4
- GitHub Stars
- 7.7천
- 업데이트
- 10월 20일
trailofbitscosmos-vulnerability-scanner
Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence. 25 core + 16 IBC + 10 EVM + 3 CosmWasm patterns. Use when auditing custom x/ modules, reviewing IBC integrations, or assessing pre-launch chain security. Updated for SDK v0.53.x.
- 1시간 설치 수
- 4
- GitHub Stars
- 7.7천
- 업데이트
- 10월 20일
trailofbitscrypto-protocol-diagram
Extracts protocol message flow from source code, RFCs, academic papers, pseudocode, informal prose, ProVerif (.pv), or Tamarin (.spthy) models and generates Mermaid sequenceDiagrams with cryptographic annotations. Use when diagramming a crypto protocol, visualizing a handshake or key exchange flow, extracting message flow from a spec or RFC, diagramming a ProVerif or Tamarin model, or drawing sequence diagrams for TLS, Noise, Signal, X3DH, Double Ratchet, FROST, DH, or ECDH protocols.
- 1시간 설치 수
- 4
- GitHub Stars
- 7.7천
- 업데이트
- 10월 20일
trailofbitsdevcontainer-setup
Creates devcontainers with Claude Code, language-specific tooling (Python/Node/Rust/Go), and persistent volumes. Use when adding devcontainer support to a project, setting up isolated development environments, or configuring sandboxed Claude Code workspaces.
- 1시간 설치 수
- 4
- GitHub Stars
- 7.7천
- 업데이트
- 10월 20일
trailofbitsdiagramming-code
Generates Mermaid diagrams from Trailmark code graphs. Produces call graphs, class hierarchies, module dependency maps, containment diagrams, complexity heatmaps, and attack surface data flow visualizations. Use when visualizing code architecture, drawing call graphs, generating class diagrams, creating dependency maps, producing complexity heatmaps, or visualizing data flow and attack surface paths as Mermaid diagrams.
- 1시간 설치 수
- 4
- GitHub Stars
- 7.7천
- 업데이트
- 10월 20일
trailofbitsdwarf-expert
Analyzes DWARF debug information in compiled binaries. Use when inspecting .debug sections, DIE trees, or DWTAG/DWAT entries with dwarfdump/llvm-dwarfdump or readelf, verifying debug info with llvm-dwarfdump --verify, answering DWARF standard questions, or writing code that parses DWARF (libdwarf, pyelftools, gimli).
- 1시간 설치 수
- 4
- GitHub Stars
- 7.7천
- 업데이트
- 10월 20일
trailofbitsfuzzing-dictionary
Builds and applies fuzzing dictionaries so a fuzzer can produce the keywords, magic bytes, and tokens a target expects. Covers extracting tokens from source, headers, binaries, and specifications, dictionary syntax, and wiring one into libFuzzer or AFL++. Use when fuzzing a parser, protocol, or file format, when coverage stalls at input validation, or when a target compares against fixed strings.
- 1시간 설치 수
- 4
- GitHub Stars
- 7.7천
- 업데이트
- 10월 20일
trailofbitsfuzzing-obstacles
Patches past the barriers that stop a fuzzer making progress — checksum and hash verification, magic-value validation, time-based seeds, and other non-deterministic global state. Covers locating the blocking check, neutering it behind a fuzzing build flag, and avoiding the false positives a patch can introduce. Use when a fuzzer is stuck at validation, when coverage shows large regions behind a checksum, or when valid inputs are impractical to generate.
- 1시간 설치 수
- 4
- GitHub Stars
- 7.7천
- 업데이트
- 10월 20일
trailofbitsgenotoxic
Graph-informed mutation testing triage. Parses codebases with Trailmark, runs mutation testing and necessist, then uses survived mutants, unnecessary test statements, and call graph data to identify false positives, missing test coverage, and fuzzing targets. Use when triaging survived mutants, analyzing mutation testing results, identifying test gaps, finding fuzzing targets from weak tests, running mutation frameworks (including circomvent and cairo-mutants), or using necessist.
- 1시간 설치 수
- 4
- GitHub Stars
- 7.7천
- 업데이트
- 10월 20일
trailofbitsgithub-triage
Triages a repository's open GitHub issues and pull requests via the gh CLI. Optionally reviews and merges ready PRs — incrementally merging passing automated/bot PRs and maintainer-approved ones, and spawning review subagents for never-reviewed ones — then closes already-resolved issues with comments citing the resolving PR or commit, cross-links issues with their pending fix PRs, and assigns local-only priority and change-size estimates for everything outstanding. Use when triaging, grooming, o
- 1시간 설치 수
- 4
- GitHub Stars
- 7.7천
- 업데이트
- 10월 20일
trailofbitsgoal-prompt
Drafts copy-paste-ready /goal commands for goal mode in Claude Code and Codex. Use when the user asks to create, write, rewrite, improve, compress, clean up, or prepare a goal prompt, goal condition, /goal command, goal-mode objective, or copy-ready long-running task objective.
- 1시간 설치 수
- 4
- GitHub Stars
- 7.7천
- 업데이트
- 10월 20일
trailofbitsgraph-evolution
Compares Trailmark code graphs at two source code snapshots (git commits, tags, or directories) to surface security-relevant structural changes. Detects new attack paths, complexity shifts, blast radius growth, taint propagation changes, and privilege boundary modifications that text diffs miss. Use when comparing code between commits or tags, analyzing structural evolution, detecting attack surface growth, reviewing what changed between audit snapshots, or finding security-relevant changes that
- 1시간 설치 수
- 4
- GitHub Stars
- 7.7천
- 업데이트
- 10월 20일
trailofbitsharness-writing
Designs and improves fuzzing harnesses for C/C++ and Rust. Covers mapping raw bytes onto a target API, generating structured inputs, avoiding non-determinism and false crashes, and deciding what to fuzz together. Use when writing a first LLVMFuzzerTestOneInput or fuzztarget! harness, when a campaign finds nothing or reports crashes that will not reproduce, or when the target API needs structured rather than raw input.
- 1시간 설치 수
- 4
- GitHub Stars
- 7.7천
- 업데이트
- 10월 20일
trailofbitsinterpreting-culture-index
Interprets Culture Index (CI) surveys, behavioral profiles, and personality assessment data. Supports individual profile interpretation, team composition analysis (gas/brake/glue), burnout detection, profile comparison, hiring profiles, manager coaching, interview transcript analysis for trait prediction, candidate debrief, onboarding planning, and conflict mediation. Accepts extracted JSON or PDF input via OpenCV extraction script. Use when the user shares a Culture Index PDF or JSON profile, a
- 1시간 설치 수
- 4
- GitHub Stars
- 7.7천
- 업데이트
- 10월 20일
trailofbitslet-fate-decide
Draws the 12 Houses of the Zodiac Tarot spread to inject entropy into planning when prompts are vague, ambiguous, or casually delegated. Interprets the spread to guide next steps. Use when the user says 'let fate decide', 'YOLO', 'whatever', 'idk', or other nonchalant phrases, makes Yu-Gi-Oh references, or when you are about to arbitrarily pick between multiple reasonable approaches. Prefer over asking clarifying questions when the user's tone is casual or playful rather than precision-seeking.
- 1시간 설치 수
- 4
- GitHub Stars
- 7.7천
- 업데이트
- 10월 20일
trailofbitslibafl
Builds custom fuzzers with LibAFL, the modular Rust fuzzing library. Covers composing observers, feedbacks, mutators, schedulers, and executors into a fuzzer for targets the standard tools do not fit. Use when writing a bespoke fuzzer or mutator, fuzzing a non-standard target or architecture, implementing a fuzzing research idea, or when libFuzzer and AFL++ lack the control you need.
- 1시간 설치 수
- 4
- GitHub Stars
- 7.7천
- 업데이트
- 10월 20일
trailofbitsmermaid-to-proverif
Translates Mermaid sequenceDiagrams describing cryptographic protocols into ProVerif formal verification models (.pv files). Use when generating a ProVerif model, formally verifying a protocol, converting a Mermaid diagram to ProVerif, verifying protocol security properties (secrecy, authentication, forward secrecy), checking for replay attacks, or producing a .pv file from a sequence diagram.
- 1시간 설치 수
- 4
- GitHub Stars
- 7.7천
- 업데이트
- 10월 20일
trailofbitsmodern-cpp
Guides C++ code toward modern idioms (C++20/23/26). Use when writing new C++ code, modernizing legacy patterns, or working on security-critical C++. Replaces raw pointers with smart pointers, SFINAE with concepts, printf with std::print, error codes with std::expected.
- 1시간 설치 수
- 4
- GitHub Stars
- 7.7천
- 업데이트
- 10월 20일
trailofbitspr-improver
Runs an autonomous review-and-fix improvement loop over the current branch's changes until a PR review comes back clean, scoped mechanically to the directories the branch touched. Reviews are performed by an installed PR-review skill (default: pr-review-toolkit's review-pr). Use to fix review findings on a branch before opening or updating a pull request ('clean up this branch', 'fix this PR until review passes', 'run review-and-fix on my changes'). NOT for a one-time review — run the PR-review
- 1시간 설치 수
- 4
- GitHub Stars
- 7.7천
- 업데이트
- 10월 20일
trailofbitsreview-walkthrough
Generates an interactive HTML walkthrough for reviewing code changes. Use only when explicitly called.
- 1시간 설치 수
- 4
- GitHub Stars
- 7.7천
- 업데이트
- 10월 20일