ARMORYou commented this keyword
Trail of Bits Skills
A marketplace of security plugins from Trail of Bits for code review, static analysis, smart contracts, fuzzing and more.
Before you start:
- Claude Code
- Setup
- 3 min
- Level
- Intermediate
- Stars
- 7.4k
- License
- CC-BY-SA-4.0
What it does
Trail of Bits is a security research firm. This repo is a plugin marketplace, a catalog you add to Claude Code and then pick plugins from.
The plugins cover smart contract security, code auditing (C/C++, Rust, Semgrep rules, static analysis, supply-chain risk), malware rules, verification and mutation testing, reverse engineering, mobile security, and general development helpers like devcontainer setup and git cleanup.
Install it
- Open Claude Code.
- Add the marketplace with the first command below.
- Open the plugin menu with the second command.
- Pick the plugins you want from the list and install them. You do not need all of them.
Add the marketplace
/plugin marketplace add trailofbits/skills
Browse and install plugins
/plugin menu
Use it
- Start with one that matches your work, for example differential-review to check a set of code changes for security issues, or static-analysis for CodeQL and Semgrep.
- Ask Claude for the task in plain words once the plugin is installed. Each plugin's folder in the repo explains what it covers.
Good to know
Codex can load this same marketplace too. The work is licensed under Creative Commons Attribution-ShareAlike 4.0.
Want the next one first?
One new guide a week, straight to your inbox.
