Skills from Trail of Bits’s repositories that passed our trust, licence and security gates. Each keeps its author’s attribution.
| Repository | Tier | Verdict | Authorship | Checked | Skills |
|---|---|---|---|---|---|
| trailofbits/skills | Vendor | Approved · created 2026-01-14, pushed 2026-11-06, 8061 stars | Written in-house | 2026-11-07 | 96 |
Files are mirrored only where the licence allows redistribution; otherwise we link to the source.
Trail of BitsOfficial
Orchestrates comprehensive Semgrep security scans with language detection, ruleset selection, and SARIF reporting.
Trail of BitsOfficial
A coverage-guided fuzzer for Ruby applications and C extensions built on libFuzzer.
Trail of BitsOfficial
A guide to creating and applying fuzzing dictionaries to improve fuzzer coverage for parsers, protocols, and file formats.
Trail of BitsOfficial
A comprehensive assistant for preparing codebases for professional security audits.
Trail of BitsOfficial
Automated structural security gate for detecting regressions in code call graphs and data flow.
Trail of BitsOfficial
Performs automated security reviews for C/C++ codebases to identify memory corruption, integer overflows, and race conditions.
Trail of BitsOfficial
Automates the porting of Semgrep rules to new languages through a structured, test-driven workflow.
Trail of BitsOfficial
A structured workflow for reproducing, patching, and verifying single bugs in a local Git repository.
Trail of BitsOfficial
Automated security scanner for identifying Firebase misconfigurations in Android APK files.
Trail of BitsOfficial
Standard fuzzing tool for Cargo-based Rust projects using libFuzzer.
Trail of BitsOfficial
Validate cryptographic implementations against a comprehensive collection of known attack vectors and edge cases.
Trail of BitsOfficial
Automated security audit tool for detecting missing or compiler-optimized zeroization of sensitive data in C, C++, and Rust codebases.
Trail of BitsOfficial
A systematic workflow for mapping codebase architecture, assumptions, and dependencies before beginning a security audit.
Trail of BitsOfficial
Static security analysis tool for identifying AI agent vulnerabilities in GitHub Actions workflows.
Trail of BitsOfficial
Orchestrates mutation testing campaigns using mewt or muton to identify testing gaps and uncover hidden bugs.
Trail of BitsOfficial
A coverage-guided fuzzer for Python code and C extensions based on libFuzzer.
Trail of BitsOfficial
Expands a confirmed vulnerability into a list of graph-derived variant candidates for security review.
Trail of BitsOfficial
Provides independent code reviews for uncommitted changes, branch diffs, and commits using Codex or Antigravity.
Trail of BitsOfficial
Automates the creation of standardized, secure development environments using devcontainers.
Trail of BitsOfficial
A workflow for delegating focused code analysis tasks to subagents using graph-informed source slices.
Trail of BitsOfficial
Integrate AddressSanitizer (ASan) into your build process to detect memory corruption bugs like buffer overflows and use-after-free errors.
Trail of BitsOfficial
Automated security scanning for Cosmos SDK modules and CosmWasm contracts to detect consensus-critical vulnerabilities.
Trail of BitsOfficial
A structured workflow for preparing and documenting source code states to investigate software regressions.
Trail of BitsOfficial
Enforces the use of the authenticated gh CLI for GitHub interactions instead of unauthenticated fetch methods.