RadarTopicsBuildersWeeklyReads
Open Source Radar
trailofbits/

skills

GitHub

Trail of Bits Skills Marketplace provides Claude Code plugins for security analysis and audit workflows. It lists multiple plugin categories and a broad set of plugin offerings under Code Auditing, Verification, and other groups.

6.4kstars
555forks
42issues
CC-BY-SA-4.0license
2026since
Star historydaily snapshots by VibeCrowd

Collecting history — the radar snapshots this repo daily. The trend line appears after 3 days of data (1 so far).

Alternatives & relatedmatched by topic overlap
Reviewgenerated from repository data · Aug 5, 2026

What it is

Trail of Bits Skills Marketplace is a Claude Code plugin marketplace that provides skills to enhance AI-assisted security analysis, testing, and development workflows. Codex can load this marketplace through its Claude marketplace compatibility.

How it works

Plugins are organized into categories (e.g., Smart Contract Security, Code Auditing, Malware Analysis, Verification, Reverse Engineering, Mobile Security, Development, Team Management, Tooling). The repository hosts a marketplace that can be added via Claude Code commands and provides a list of available plugins with descriptions.

Getting started

Install the marketplace for Claude Code:

/plugin marketplace add trailofbits/skills

Browse and install plugins with:

/plugin menu

For Codex, install the marketplace and then add plugins with:

codex plugin marketplace add trailofbits/skills
codex plugin list
codex plugin add <plugin-name>@trailofbits

To develop locally, navigate to the parent directory of this repository and add the marketplace:

cd /path/to/parent  # e.g., if repo is at ~/projects/skills, be in ~/projects
/plugins marketplace add ./skills

Recent releases

  • none

Traction

6426 stars, 555 forks, 42 open issues. Language: Python. License: CC-BY-SA-4.0. Created: 2026-01-14. Last push: 2026-08-04.

Behind the repo

NA

Caveats

License: Creative Commons Attribution-ShareAlike 4.0 International. Open issues: 42. Repository language: Python. Created date and last push are provided above.

Agent skills inside · 78
All skills →
let-fate-decideDraws the 12 Houses of the Zodiac Tarot spread to inject entropy into planning when prompts are vague, ambiguous, or casually delegated. Interprets the spread to guide next steps. Use when the user says 'let fate decide', 'YOLO', 'whatever', 'idk', or other nonchalant phrases, makes Yu-Gi-Oh references, or when you are about to arbitrarily pick between multiple reasonable approaches. Prefer over asking clarifying questions when the user's tone is casual or playful rather than precision-seeking.Otherscriptsinterpreting-culture-indexInterprets Culture Index (CI) surveys, behavioral profiles, and personality assessment data. Supports individual profile interpretation, team composition analysis (gas/brake/glue), burnout detection, profile comparison, hiring profiles, manager coaching, interview transcript analysis for trait prediction, candidate debrief, onboarding planning, and conflict mediation. Accepts extracted JSON or PDF input via OpenCV extraction script.Data & Analyticsscriptszeroize-auditDetects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizations, with assembly-level analysis, and control-flow verification. Use for auditing C/C++/Rust code handling secrets, keys, passwords, or other sensitive data.Securityscriptsyara-rule-authoringGuides authoring of high-quality YARA-X detection rules for malware identification. Use when writing, reviewing, or optimizing YARA rules. Covers naming conventions, string selection, performance optimization, migration from legacy YARA, and false positive reduction. Triggers on: YARA, YARA-X, malware detection, threat hunting, IOC, signature, crx module, dex module.Securityscriptscrypto-protocol-diagramExtracts protocol message flow from source code, RFCs, academic papers, pseudocode, informal prose, ProVerif (.pv), or Tamarin (.spthy) models and generates Mermaid sequenceDiagrams with cryptographic annotations. Use when diagramming a crypto protocol, visualizing a handshake or key exchange flow, extracting message flow from a spec or RFC, diagramming a ProVerif or Tamarin model, or drawing sequence diagrams for TLS, Noise, Signal, X3DH, Double Ratchet, FROST, DH, or ECDH protocols.Documentationscriptsopen-sourcingThis skill should be used when the user asks to "open source this project", "prepare this repository for public release", "make this repo public", "check open-source readiness", "choose a license for this project", or "set up release automation" ahead of a public launch. Provides a release-readiness workflow covering secrets hygiene, licensing, documentation, CI, and language-specific packaging.Documentationscripts
SharePost on XLinkedIn
All trending reposRevenue-verified startups →