도구
등록된 모든 Skill, MCP 서버, CLI, 플러그인입니다. 유형, 직업, 태그로 필터링하거나 키워드로 검색할 수 있습니다.
직업: QA +2
여러 개를 선택할 수 있습니다. 그중 하나에라도 맞는 리소스가 표시됩니다.
태그: trailofbits
여러 개를 선택할 수 있습니다. 선택한 태그를 모두 가진 리소스만 표시됩니다.
4개
Trail of Bits Skills
SkillSkills from security firm Trail of Bits: 40+ plugins for code auditing, CodeQL and Semgrep static analysis, differential review, smart-contract and cryptography audits, fuzzing and more. Also installable as a Claude Code or Codex plugin marketplace.
trailofbits/skills7.6kStatic Analysis
SkillTrail of Bits static analysis skills: CodeQL for interprocedural taint tracking and data-flow analysis, Semgrep for rule-based scanning, plus parsing and deduplicating SARIF results. Requires CodeQL or Semgrep installed locally.
trailofbits/skills7.6kAgentic Actions Auditor
SkillTrail of Bits skill that audits GitHub Actions workflows wired to AI coding agents (Claude Code Action, Codex, Gemini CLI and others) for prompt injection, env-variable relays, dangerous sandbox settings, wildcard allowlists and other privilege risks.
trailofbits/skills7.6kSupply Chain Risk Auditor
SkillTrail of Bits skill that audits npm, PyPI and Go supply-chain risk: known advisories across direct deps and the whole lockfile tree, deprecated or archived upstreams, npm publisher concentration and install-time scripts. Needs uv; a logged-in gh is recommended.
trailofbits/skills7.6k