audit-prep-assistant
Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tools, increases test coverage, removes dead code, ensures accessibility, and generates documentation (flowcharts, user stories, inline comments).
npx skills add trailofbits/skills --skill audit-prep-assistant --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Audit Prep Assistant ## Purpose Helps prepare for a security review using Trail of Bits' checklist. A well-prepared codebase makes the review process smoother and more effective. **Use this**: 1-2 weeks before your security audit --- ## The Preparation Process ### Step 1: Set Review Goals Helps define what you want from the review: **Key Questions**: - What's the overall security level you're aiming for? - What areas concern you most? - Previous audit issues? - Complex components? - Fragile parts? - What's the worst-case scenario for your project? Documents goals to share with the assessment team. --- ### Step 2: Resolve Easy Issues Runs static analysis and helps fix low-hanging fruit: **Run Static Analysis**: For Solidity: ```bash slither . --exclude-dependencies ``` For Rust: ```bash dylint --all ``` For Go: ```bash golangci-lint run ``` For Go/Rust/C++: ```bash # CodeQL and Semgrep checks ``` Then I'll: - Triage all findings - Help fix easy issues - Document accepted risks **Increase Test Coverage**: - Analyze current coverage - Identify untested code - Suggest new tests - Run full test suite **Remove Dead Code**: - Find unused functions/variables - Identify unused libraries -
- Purpose
- The Preparation Process
- Step 1: Set Review Goals
- Step 2: Resolve Easy Issues
- Step 3: Ensure Code Accessibility
- Step 4: Generate Documentation
- How I Work
- Rationalizations (Do Not Skip)
- Example Output
- What You'll Get
- Timeline
- Ready to Prep
slither . --exclude-dependencies dylint --all golangci-lint run CodeQL and Semgrep checks
What does the audit-prep-assistant skill do?
Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tools, increases test coverage, removes dead code, ensures accessibility, and generates documentation (flowcharts, user stories, inline comments).
How do I install it?
Run `npx skills add trailofbits/skills --skill audit-prep-assistant --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From trailofbits/skills, a repository with 6,426 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.