도구
등록된 모든 Skill, MCP 서버, CLI, 플러그인입니다. 유형, 직업, 태그로 필터링하거나 키워드로 검색할 수 있습니다.
직업: DevOps / SRE +1
여러 개를 선택할 수 있습니다. 그중 하나에라도 맞는 리소스가 표시됩니다.
태그: trailofbits
여러 개를 선택할 수 있습니다. 선택한 태그를 모두 가진 리소스만 표시됩니다.
3개
Agentic Actions Auditor
SkillTrail of Bits skill that audits GitHub Actions workflows wired to AI coding agents (Claude Code Action, Codex, Gemini CLI and others) for prompt injection, env-variable relays, dangerous sandbox settings, wildcard allowlists and other privilege risks.
trailofbits/skills7.6kSupply Chain Risk Auditor
SkillTrail of Bits skill that audits npm, PyPI and Go supply-chain risk: known advisories across direct deps and the whole lockfile tree, deprecated or archived upstreams, npm publisher concentration and install-time scripts. Needs uv; a logged-in gh is recommended.
trailofbits/skills7.6kStatic Analysis
SkillTrail of Bits static analysis skills: CodeQL for interprocedural taint tracking and data-flow analysis, Semgrep for rule-based scanning, plus parsing and deduplicating SARIF results. Requires CodeQL or Semgrep installed locally.
trailofbits/skills7.6k