trailofbits/skills

Project overview

The project has documented real-world bug discoveries, including timing side-channels in cryptographic code, demonstrating practical results from its AI-assisted security skills.

Project type

AI Coding

Deployment

Refer to project documentation

License

CC-BY-SA-4.0

Best for

• Developers and researchers who need specialized security analysis plugins within Claude Code or Codex.
• Security professionals conducting malware analysis, reverse engineering, or mobile security work within an AI coding agent.

Key capabilities

• Provides a Claude Code plugin marketplace from Trail of Bits that can be added and installed via commands.
• Codex can load this marketplace through its Claude marketplace compatibility.
• Ships plugins for malware analysis including YARA detection rule authoring with linting and atom analysis.
• Ships plugins for reverse engineering including DWARF debug info analysis.
• Ships plugins for mobile security including Android APK Firebase security misconfiguration scanning.

Limitations and risks

• Plugins are designed for use within Claude Code or Codex rather than as standalone tools.

Getting started

• Run /plugin marketplace add trailofbits/skills, then run /plugin menu to browse and install plugins. Installation difficulty is rated easy because it requires a single command in the target platform.

Evidence and sources

Open original GitHub project