Agent skill · Security

testing-handbook-generator

Meta-skill that analyzes the Trail of Bits Testing Handbook (appsec.guide) and generates Claude Code skills for security testing tools and techniques. Use when creating new skills based on handbook content.

trailofbitsgithub.com/trailofbitsGitHub ↗
claude-codeCC-BY-SA-4.0
Install
npx skills add trailofbits/skills --skill testing-handbook-generator --agent claude-code

Same command for any agent — swap --agent for codex, cursor, copilot.

Facts
Files in the skill folder: 10
SKILL.md size: 13 KB
Bundled scripts: none
Path: plugins/testing-handbook-skills/skills/testing-handbook-generator/SKILL.md
Open the folder on GitHub →
Where it comes from
Stars: 6,426
Language: Python
Read our review of the source →

Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.

From the SKILL.md

# Testing Handbook Skill Generator Generate and maintain Claude Code skills from the Trail of Bits Testing Handbook. ## When to Use **Invoke this skill when:** - Creating new security testing skills from handbook content - User mentions "testing handbook", "appsec.guide", or asks about generating skills - Bulk skill generation or refresh is needed **Do NOT use for:** - General security testing questions (use the generated skills) - Non-handbook skill creation ## Handbook Location The skill needs the Testing Handbook repository. See [discovery.md](discovery.md) for full details. **Quick reference:** Check `./testing-handbook`, `../testing-handbook`, `~/testing-handbook` → ask user → clone as last resort. **Repository:** `https://github.com/trailofbits/testing-handbook` ## Workflow Overview ``` Phase 0: Setup Phase 1: Discovery ┌─────────────────┐ ┌─────────────────┐ │ Locate handbook │ → │ Analyze handbook│ │ - Find or clone │ │ - Scan sections │ │ - Confirm path │ │ - Classify types│ └─────────────────┘ └─────────────────┘ ↓ ↓ Phase 3: Generation Phase 2: Planning ┌─────────────────┐ ┌─────────────────┐ │ TWO-PASS GEN │ ← │ Generate plan │ │ Pass 1: Content │ │ - New skills │ │ Pas

What's inside
Steps it walks through
  1. When to Use
  2. Handbook Location
  3. Workflow Overview
  4. Scope Restrictions
  5. Quick Reference
  6. Section → Skill Type Mapping
  7. Skill Candidate Signals
  8. Exclusion Signals
  9. Decision Tree
  10. Two-Pass Generation (Phase 3)
  11. Pass 1: Content Generation (Parallel)
  12. Pass 2: Cross-Reference Population (Sequential)
  13. Agent Prompt Template
  14. Collecting Results
Ships with 9 files
  • agent-prompt.md
  • agents/openai.yaml
  • assets/trail-of-bits-mark.svg
  • discovery.md
  • templates/domain-skill.md
  • templates/fuzzer-skill.md
  • templates/technique-skill.md
  • templates/tool-skill.md
  • testing.md
More from skills
All skills →
About this skill
What does the testing-handbook-generator skill do?

Meta-skill that analyzes the Trail of Bits Testing Handbook (appsec.guide) and generates Claude Code skills for security testing tools and techniques. Use when creating new skills based on handbook content.

How do I install it?

Run `npx skills add trailofbits/skills --skill testing-handbook-generator --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.

Where does this skill come from?

From trailofbits/skills, a repository with 6,426 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.

Is a popular skill a good skill?

Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.

Keep going