Trusted skills for AI agents from official vendors and established maintainers. Every skill is attributed to its author, scanned, and comes with install steps for your AI tool.
213 skills
Trail of BitsOfficial
Automated security vulnerability scanning using CodeQL interprocedural data flow and taint tracking analysis.
Trail of BitsOfficial
Perform graph-assisted triage of security findings to determine reachability and prioritize exploit validation.
Trail of BitsOfficial
Augment Trailmark code graphs with external security audit findings from SARIF, weAudit, and binary analysis exports.
Trail of BitsOfficial
A comprehensive 5-step security assessment workflow for smart contract development.
Trail of BitsOfficial
A guide to enrolling open-source projects in Google's OSS-Fuzz service and managing fuzzing workflows locally.
Trail of BitsOfficial
A security-focused differential code review tool that analyzes changes, calculates blast radius, and generates detailed vulnerability reports.
Trail of BitsOfficial
A systematic security auditing tool for identifying critical vulnerabilities in Substrate and Polkadot runtime pallets.
Trail of BitsOfficial
Validates security patches by executing reproducible baseline-versus-patched evidence to ensure fixes are correct and regression-free.
Trail of BitsOfficial
A guide to detecting and mitigating timing side-channel vulnerabilities in cryptographic implementations.
Trail of BitsOfficial
Orchestrates comprehensive Semgrep security scans with language detection, ruleset selection, and SARIF reporting.
Trail of BitsOfficial
A comprehensive assistant for preparing codebases for professional security audits.
Trail of BitsOfficial
Automated structural security gate for detecting regressions in code call graphs and data flow.
Trail of BitsOfficial
Performs automated security reviews for C/C++ codebases to identify memory corruption, integer overflows, and race conditions.
Trail of BitsOfficial
Automates the porting of Semgrep rules to new languages through a structured, test-driven workflow.
Trail of BitsOfficial
Automated security scanner for identifying Firebase misconfigurations in Android APK files.
Trail of BitsOfficial
Standard fuzzing tool for Cargo-based Rust projects using libFuzzer.
Trail of BitsOfficial
Validate cryptographic implementations against a comprehensive collection of known attack vectors and edge cases.
Trail of BitsOfficial
Automated security audit tool for detecting missing or compiler-optimized zeroization of sensitive data in C, C++, and Rust codebases.
Trail of BitsOfficial
A systematic workflow for mapping codebase architecture, assumptions, and dependencies before beginning a security audit.
Trail of BitsOfficial
Static security analysis tool for identifying AI agent vulnerabilities in GitHub Actions workflows.
Trail of BitsOfficial
A coverage-guided fuzzer for Python code and C extensions based on libFuzzer.
Trail of BitsOfficial
Expands a confirmed vulnerability into a list of graph-derived variant candidates for security review.
Trail of BitsOfficial
Automated security scanning for Cosmos SDK modules and CosmWasm contracts to detect consensus-critical vulnerabilities.
OpenAIOfficial
Use when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a security finding from source to sink and calibrate severity. Do not use as the primary trigger for full PR, commit, branch, patch, or repository scans.