AGENT SKILLS · EQUIPAMENTO DE MISSÃO
Agent Skills úteis classificados pelo uso real
Compare Skills verificados por finalidade, conteúdo do pacote, instalações e evidências da fonte antes de adicioná-los.
- ESCOPO DO CATÁLOGO
- VERIFICADO
- Skills
- 23.248
- repositórios
- 3589
- última sincronização
- 4 de nov. de 2026
trailofbitsrust-review
Performs comprehensive Rust security review for safe/unsafe boundary issues, memory safety in unsafe blocks, concurrency hazards, panic-induced DoS, FFI safety, and async runtime mistakes. Use when auditing Rust crates, services, or libraries — particularly those with unsafe, FFI, or concurrent code.
- Instalações / 1h
- 4
- GitHub Stars
- 7,7 mil
- Atualizado
- 20 de out.
trailofbitsruzzy
Sets up and runs Ruzzy, Trail of Bits' coverage-guided Ruby fuzzer and the only production-ready one for the language. Covers harness structure, fuzzing pure Ruby and the native C extensions in gems, and sanitizer builds. Use when fuzzing a Ruby library or gem, testing a Ruby C extension for memory safety, or asking how to fuzz Ruby at all.
- Instalações / 1h
- 4
- GitHub Stars
- 7,7 mil
- Atualizado
- 20 de out.
trailofbitssarif-parsing
Parses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other scanners. Triggers on "parse sarif", "read scan results", "aggregate findings", "deduplicate alerts", or "process sarif output". Handles filtering, deduplication, format conversion, and CI/CD integration of SARIF data. Does NOT run scans — use the Semgrep or CodeQL skills for that.
- Instalações / 1h
- 4
- GitHub Stars
- 7,7 mil
- Atualizado
- 20 de out.
trailofbitssemgrep-rule-variant-creator
Creates language variants of existing Semgrep rules. Use when porting a Semgrep rule to specified target languages. Takes an existing rule and target languages as input, produces independent rule+test directories for each language.
- Instalações / 1h
- 4
- GitHub Stars
- 7,7 mil
- Atualizado
- 20 de out.
trailofbitsskill-improver
Runs an autonomous review-and-fix improvement loop over a Claude Code skill until a review comes back clean, with a cross-round findings ledger, escalation when fixes stop converging, and a mechanical scope guard. Reviews are performed by the plugin-dev skill-reviewer agent. Use to fix skill quality issues, iteratively refine a skill, or resume a loop after an escalation ('fix my skill', 'improve this skill until it passes review', 'skill improvement loop'). NOT for a one-time review — use the p
- Instalações / 1h
- 4
- GitHub Stars
- 7,7 mil
- Atualizado
- 20 de out.
trailofbitsslicing-code-context
Selects bounded, graph-informed source slices with Trailmark and delegates focused code analysis or patch-proposal work to a smaller subagent. Use when offloading function-, class-, caller-, callee-, call-path-, entrypoint-, or line-focused code tasks to constrained or locally hosted models without exposing the full repository.
- Instalações / 1h
- 4
- GitHub Stars
- 7,7 mil
- Atualizado
- 20 de out.
trailofbitssolana-vulnerability-scanner
Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ownership checks, and sysvar spoofing. Use when auditing Solana/Anchor programs.
- Instalações / 1h
- 4
- GitHub Stars
- 7,7 mil
- Atualizado
- 20 de out.
trailofbitssubstrate-vulnerability-scanner
Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad origin checks. Use when auditing Substrate runtimes or FRAME pallets.
- Instalações / 1h
- 4
- GitHub Stars
- 7,7 mil
- Atualizado
- 20 de out.
trailofbitstesting-handbook-generator
Generates Claude Code skills from the Trail of Bits Testing Handbook (appsec.guide), analyzing handbook pages and emitting SKILL.md files with the structure each skill type requires. Use when creating or refreshing a skill from handbook content, or when the user names the testing handbook or appsec.guide. Not for answering security testing questions — the generated skills cover those.
- Instalações / 1h
- 4
- GitHub Stars
- 7,7 mil
- Atualizado
- 20 de out.
trailofbitston-vulnerability-scanner
Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boolean misuse, fake Jetton contracts, and forward TON without gas checks. Use when auditing FunC contracts.
- Instalações / 1h
- 4
- GitHub Stars
- 7,7 mil
- Atualizado
- 20 de out.
trailofbitstrailmark
Builds and queries multi-language source and binary code graphs for security analysis. Includes pre-analysis passes for blast radius, taint propagation, privilege boundaries, entry point enumeration, proxy/unresolved-call tracking, type/reference queries, structural traversal, graph diffs, audit augmentation, declared cross-language/FFI/external links via .trailmark/links.toml, and SQL schema graphs. Use when analyzing call paths, mapping attack surface, finding complexity hotspots, enumerating
- Instalações / 1h
- 4
- GitHub Stars
- 7,7 mil
- Atualizado
- 20 de out.
trailofbitstrailmark-finding-triage
Performs graph-assisted triage of a single security finding, SARIF result, weAudit annotation, suspicious function, or report excerpt using Trailmark reachability, entrypoint paths, taint, privilege-boundary, blast-radius, caller/callee, and neighborhood evidence. Use when deciding whether one candidate issue is reachable, prioritizing a finding before PoC work, preparing evidence for exploit validation, or checking whether a static-analysis result is actionable.
- Instalações / 1h
- 4
- GitHub Stars
- 7,7 mil
- Atualizado
- 20 de out.
trailofbitstrailmark-review-gate
Runs a Trailmark structural review gate over a branch, pull request, fix commit, release diff, or git ref range to detect new entrypoints, new tainted paths, removed validation or authorization calls, privilege-boundary drift, blast-radius growth, complexity growth, and newly reachable sensitive sinks. Use when reviewing a PR, branch, remediation commit, or release diff where graph-level security regressions should be checked before merge.
- Instalações / 1h
- 4
- GitHub Stars
- 7,7 mil
- Atualizado
- 20 de out.
trailofbitstrailmark-structural
Runs full Trailmark structural analysis by building a graph, running preanalysis(), and reporting hotspots, taint, blast radius, privilege boundaries, attack surface, and version-gated Trailmark 0.4+/0.5+ data such as proxy counts, subgraph edges, type/reference summaries, and entrypoint attributes. Use when vivisect needs detailed structural data for a target. Triggers: structural analysis, blast radius, taint analysis, complexity hotspots, proxy nodes, type references.
- Instalações / 1h
- 4
- GitHub Stars
- 7,7 mil
- Atualizado
- 20 de out.
trailofbitstrailmark-summary
Runs a Trailmark summary analysis on a codebase. Returns auto-detected languages, entry point count, and dependency list. Use when vivisect or galvanize needs a quick structural overview. Triggers: trailmark summary, code summary, structural overview.
- Instalações / 1h
- 4
- GitHub Stars
- 7,7 mil
- Atualizado
- 20 de out.
trailofbitstrailmark-variant-neighborhood
Expands one confirmed or suspected vulnerability into a Trailmark graph neighborhood of variant candidates by finding sibling functions, shared callers and callees, common sensitive sinks, common entrypoint paths, interface implementations, override relationships, type/reference neighbors, and structurally similar nodes. Use after one issue is found to seed variant-analysis, semgrep-rule-creator, static-analysis, or manual review with graph-derived candidate locations.
- Instalações / 1h
- 4
- GitHub Stars
- 7,7 mil
- Atualizado
- 20 de out.
trailofbitsvector-forge
Mutation-driven test vector generation. Finds implementations of a cryptographic algorithm or protocol, runs mutation testing to identify escaped mutants, then generates new test vectors that deliberately exercise the uncovered code paths. Compares before/after mutation kill rates to prove vector effectiveness. Use when generating cryptographic test vectors, measuring Wycheproof coverage gaps, finding escaped mutants via mutation testing, creating cross-implementation test suites, or improving t
- Instalações / 1h
- 4
- GitHub Stars
- 7,7 mil
- Atualizado
- 20 de out.
trailofbitsvulnerability-triage-brocards
This skill should be used when the user asks to "triage a vulnerability report", "assess a CVE", "evaluate a bug bounty submission", "decide if a finding is valid", "review a security finding", "dismiss a vulnerability", "should we fix this CVE", "prioritize a vulnerability report", or needs to determine whether an incoming vulnerability report warrants investigation. Applies 7 brocards (rules of thumb) to systematically accept, dismiss, or request more information on vulnerability reports, or n
- Instalações / 1h
- 4
- GitHub Stars
- 7,7 mil
- Atualizado
- 20 de out.
trailofbitswriting-lean-proofs
Writes and reviews structured Lean 4 proofs and designs Lean libraries following Mathlib conventions. Use when proving theorems in Lean, formalizing mathematics or specifications in Lean 4, defining new types or definitions in a Lean library, reviewing Lean proofs for readability and maintainability, refactoring long tactic proofs into lemmas, filling in sorry placeholders in a Lean development, setting up CI or linters for a Lean project, diagnosing slow proofs or maxHeartbeats timeouts, or wri
- Instalações / 1h
- 4
- GitHub Stars
- 7,7 mil
- Atualizado
- 20 de out.
trailofbitswycheproof
Validates cryptographic implementations against Project Wycheproof's test vectors, which encode known attacks and edge cases across AES, RSA, ECDSA, ECDH, and more. Covers loading test vectors, mapping result flags onto pass and fail expectations, and reading a failure. Use when testing a crypto implementation against known attacks, checking a library against standard test vectors, or investigating why two implementations disagree on the same input.
- Instalações / 1h
- 4
- GitHub Stars
- 7,7 mil
- Atualizado
- 20 de out.
trailofbitsyara-rule-authoring
Guides authoring of high-quality YARA-X detection rules for malware identification. Use when writing, reviewing, or optimizing YARA rules. Covers naming conventions, string selection, performance optimization, migration from legacy YARA, and false positive reduction. Triggers on: YARA, YARA-X, malware detection, threat hunting, IOC, signature, crx module, dex module.
- Instalações / 1h
- 4
- GitHub Stars
- 7,7 mil
- Atualizado
- 20 de out.
trailofbitszeroize-audit
Detects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizations, with assembly-level analysis, and control-flow verification. Use for auditing C/C++/Rust code handling secrets, keys, passwords, or other sensitive data.
- Instalações / 1h
- 4
- GitHub Stars
- 7,7 mil
- Atualizado
- 20 de out.
trailofbitsaflpp
Sets up and runs AFL++ for multi-core fuzzing of C/C++ projects built with afl-clang-fast or afl-gcc-fast. Covers instrumentation modes, parallel main and secondary campaigns, persistent mode, corpus minimization, and crash triage. Use when scaling fuzzing across cores, fuzzing a mature C/C++ codebase, reading the afl-fuzz status screen, or moving on after libFuzzer has plateaued.
- Instalações / 1h
- 4
- GitHub Stars
- 7,7 mil
- Atualizado
- 20 de out.
trailofbitscargo-fuzz
Sets up and runs cargo-fuzz, the standard fuzzing tool for Cargo-based Rust projects. Covers cargo fuzz init, the nightly toolchain requirement, fuzztarget! harnesses, Arbitrary-derived structured inputs, sanitizer options, cargo fuzz coverage, and reproducing a crash artifact. Use when fuzzing a Rust crate, writing a fuzztarget!, exercising unsafe blocks or FFI in Rust, or triaging a cargo fuzz crash.
- Instalações / 1h
- 4
- GitHub Stars
- 7,7 mil
- Atualizado
- 20 de out.