Tools

Skills from security firm Trail of Bits: 40+ plugins for code auditing, CodeQL and Semgrep static analysis, differential review, smart-contract and cryptography audits, fuzzing and more. Also installable as a Claude Code or Codex plugin marketplace.

Community-maintained cybersecurity skill library: 800+ skills across 34 domains including threat hunting, incident forensics, penetration testing and cloud security, mapped to MITRE ATT&CK and NIST CSF. Not by Anthropic; offensive skills are for authorized testing only.

A JADX decompiler plugin plus companion MCP server that lets agents read an APK's classes, methods, Smali and resources to assist Android reverse engineering and vulnerability hunting. Requires JADX-GUI and uv.

Lets agents drive WinDbg's CDB/KD to analyze crash dumps, debug user-mode processes remotely and debug kernels, and triage many dumps in a batch. Windows only; requires WinDbg or Debugging Tools for Windows.