audit-context-building
Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding.
npx skills add trailofbits/skills --skill audit-context-building --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Deep Context Builder Skill (Ultra-Granular Pure Context Mode) ## 1. Purpose This skill governs **how Claude thinks** during the context-building phase of an audit. When active, Claude will: - Perform **line-by-line / block-by-block** code analysis by default. - Apply **First Principles**, **5 Whys**, and **5 Hows** at micro scale. - Continuously link insights → functions → modules → entire system. - Maintain a stable, explicit mental model that evolves with new evidence. - Identify invariants, assumptions, flows, and reasoning hazards. This skill defines a structured analysis format (see Example: Function Micro-Analysis below) and runs **before** the vulnerability-hunting phase. --- ## 2. When to Use This Skill Use when: - Deep comprehension is needed before bug or vulnerability discovery. - You want bottom-up understanding instead of high-level guessing. - Reducing hallucinations, contradictions, and context loss is critical. - Preparing for security auditing, architecture review, or threat modeling. Do **not** use for: - Vulnerability findings - Fix recommendations - Exploit reasoning - Severity/impact rating --- ## 3. How This Skill Behaves When active, Claude will: - Default
- 1. Purpose
- 2. When to Use This Skill
- 3. How This Skill Behaves
- Rationalizations (Do Not Skip)
- 4. Phase 1 — Initial Orientation (Bottom-Up Scan)
- 5. Phase 2 — Ultra-Granular Function Analysis (Default Mode)
- 5.1 Per-Function Microstructure Checklist
- 5.2 Cross-Function & External Flow Analysis
- 5.3 Complete Analysis Example
- 5.4 Output Requirements
- 5.5 Completeness Checklist
- 6. Phase 3 — Global System Understanding
- 7. Stability & Consistency Rules
- 8. Subagent Usage
What does the audit-context-building skill do?
Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding.
How do I install it?
Run `npx skills add trailofbits/skills --skill audit-context-building --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From trailofbits/skills, a repository with 6,426 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.