Инструменты
Все Skills, MCP-серверы, CLI и плагины каталога. Фильтруйте по типу, профессии или тегу либо ищите по ключевому слову.
Профессия: DevOps / SRE +2
Можно выбрать несколько: показываются ресурсы, подходящие хотя бы для одной из них.
Теги: codeql
Можно выбрать несколько: показываются только ресурсы со всеми выбранными тегами.
4 ресурса

Trail of Bits Skills
SkillSkills from security firm Trail of Bits: 40+ plugins for code auditing, CodeQL and Semgrep static analysis, differential review, smart-contract and cryptography audits, fuzzing and more. Also installable as a Claude Code or Codex plugin marketplace.
trailofbits/skills7.6k
Trail of Bits Skills
PluginPlugin marketplace from security firm Trail of Bits with 40+ plugins for code auditing, CodeQL/Semgrep static analysis, variant analysis, supply-chain risk, smart contract security and reverse engineering. Codex can load it directly too.
trailofbits/skills7.6k
Static Analysis
SkillTrail of Bits static analysis skills: CodeQL for interprocedural taint tracking and data-flow analysis, Semgrep for rule-based scanning, plus parsing and deduplicating SARIF results. Requires CodeQL or Semgrep installed locally.
trailofbits/skills7.6k
Variant Analysis
SkillFrom Trail of Bits: starts from one confirmed vulnerability, distills its root cause, then writes and progressively generalizes CodeQL/Semgrep queries to find similar variants across the codebase and report them by severity.
trailofbits/skills7.6k