Инструменты
Все Skills, MCP-серверы, CLI и плагины каталога. Фильтруйте по типу, профессии или тегу либо ищите по ключевому слову.
Профессия: DevOps / SRE +2
Можно выбрать несколько: показываются ресурсы, подходящие хотя бы для одной из них.
Теги: trailofbits
Можно выбрать несколько: показываются только ресурсы со всеми выбранными тегами.
4 ресурса
Supply Chain Risk Auditor
SkillTrail of Bits skill that audits npm, PyPI and Go supply-chain risk: known advisories across direct deps and the whole lockfile tree, deprecated or archived upstreams, npm publisher concentration and install-time scripts. Needs uv; a logged-in gh is recommended.
trailofbits/skills8kAgentic Actions Auditor
SkillTrail of Bits skill that audits GitHub Actions workflows wired to AI coding agents (Claude Code Action, Codex, Gemini CLI and others) for prompt injection, env-variable relays, dangerous sandbox settings, wildcard allowlists and other privilege risks.
trailofbits/skills8kStatic Analysis
SkillTrail of Bits static analysis skills: CodeQL for interprocedural taint tracking and data-flow analysis, Semgrep for rule-based scanning, plus parsing and deduplicating SARIF results. Requires CodeQL or Semgrep installed locally.
trailofbits/skills8kCulture Index
PluginTrail of Bits plugin for Culture Index assessments: profiles individual traits, checks team balance (gas, brake, glue), compares people with job profiles to flag burnout and attrition risk, and helps draft hiring profiles. Needs your own reports (JSON or PDF); PDFs need uv.
trailofbits/skills8k