trailofbits/skills

View on GitHub

Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

Stars: 7.2k
Forks: 612
Open beginner issues: 0
Indexed issues: 23
Avg merge: 17h 35m
Merged PRs (30d): 28

Dominant language: Python
License: CC-BY-SA-4.0
Last GitHub push: Sep 16, 2026
Latest indexed: Sep 19, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

23 open issues indexed

static-analysis: references/rulesets.md recommends p/express, which returns 404 Open

Difficulty 1/5 Under an hour Newbie friendliness 93/100

trailofbits/skills#299 · Opened Sep 7, 2026
static-analysis: files over 1 MB are dropped silently — the skill neither raises --max-target-bytes nor reports the skip Open

Difficulty 3/5 1-2 days Newbie friendliness 72/100

trailofbits/skills#298 · Opened Sep 7, 2026
static-analysis: run-scans.sh expands --include globs against the CWD, silently dropping an extension Open

Difficulty 2/5 1-3 hours Newbie friendliness 86/100

trailofbits/skills#297 · Opened Sep 7, 2026
Windows packaging: CRLF makes every packaged Workflow unrunnable, and fp-check's Stop hook deadlocks the session (#205's fix never merged) Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

trailofbits/skills#289 · Opened Aug 28, 2026
writing-lean-proofs: eval fixtures are never compiled, and two of them do not build Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

trailofbits/skills#242 · Opened Aug 7, 2026
[Trophy] Code Execution in Obsidian Templater plugin Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

trailofbits/skills#197 · Opened Jul 7, 2026
[Trophy] Cross-skill inconsistency: ASan memory-limit requirements not cross-referenced between aflpp and libfuzzer Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

trailofbits/skills#181 · Opened Jun 10, 2026
Using trailofbits/skills as a test corpus — small parser-spec finding (SKILL.md version field) Open

Difficulty 1/5 Under an hour Newbie friendliness 20/100

trailofbits/skills#171 · Opened May 22, 2026
for orgs with proprietary security skills, where do they live? Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

trailofbits/skills#164 · Opened May 13, 2026
modern-python PATH shim silently fails bare python3 in Claude Code hook contexts Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

trailofbits/skills#162 · 2 comments · Opened May 10, 2026
gh-cli shim: PATH walk fails inside Homebrew superenv Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

trailofbits/skills#145 · 3 reactions · Opened Apr 12, 2026
fp-check Stop hook with matcher "*" fires on every unrelated session, causing forced LLM turns Open

Difficulty 2/5 1-3 hours Newbie friendliness 70/100

trailofbits/skills#143 · 3 comments · 3 reactions · Opened Apr 8, 2026
Consider listing in awesome-codex-plugins Open

Difficulty 1/5 Under an hour Newbie friendliness 58/100

trailofbits/skills#141 · Opened Apr 1, 2026
Support for `Tolk` for `Smart Contract Security` plugins Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

trailofbits/skills#121 · Opened Mar 11, 2026
devcontainer-setup may set up incorrect path? Open

Difficulty 3/5 1-2 days Newbie friendliness 32/100

trailofbits/skills#118 · 1 comment · Opened Mar 6, 2026
Is there a communication group? Open

Difficulty 1/5 Under an hour Newbie friendliness 20/100

trailofbits/skills#117 · Opened Mar 5, 2026
static-analysis create-data-extensions workflow should support c/c++ Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

trailofbits/skills#111 · 1 reaction · Opened Feb 27, 2026
static-analysis skills should handle ignored files Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

trailofbits/skills#105 · Opened Feb 23, 2026
Feature: Diff review should also read audit reports Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

trailofbits/skills#94 · Opened Feb 17, 2026
Simplify bug-finding skills with shared framework Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

trailofbits/skills#66 · Opened Feb 5, 2026
docs: Add Gemini CLI compatibility instructions Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

trailofbits/skills#12 · 1 reaction · Opened Jan 16, 2026
Cursor compatibility: directory structure, {baseDir}, and Claude-specific features Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

trailofbits/skills#8 · Opened Jan 15, 2026
Enhancement: Extract DWARF spec to queryable JSON Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

trailofbits/skills#2 · Opened Jan 14, 2026

trailofbits/skills

Get new issues in your inbox