Trail of Bits
Official@trailofbits · New York, New York
More code: binary lifters @lifting-bits, blockchain @crytic, forks @trail-of-forks
Agent Skills by Trail of Bits
Showing 92 vetted skills indexed across 2 GitHub repositories.
trailofbitsvulnerability-triage-brocards
Evaluate vulnerability reports against 7 falsifiable brocards to accept, dismiss, or request more information.
trailofbitsgithub-triage
Triages open GitHub issues and pull requests via the gh CLI with gated writes.
trailofbitstrailmark-finding-triage
Triages a single security finding using Trailmark graph reachability, taint, and blast-radius evidence.
trailofbitsslicing-code-context
Builds bounded graph-informed source slices with Trailmark for delegation to constrained subagents.
trailofbitstrailmark-review-gate
Applies structural gate rules to Trailmark graph diffs to detect security regressions in branches and pull requests.
trailofbitstrailmark-variant-neighborhood
Expands a confirmed vulnerability into ranked graph-derived variant candidates for security review.
trailofbitsmodern-cpp
Guides C++ code toward modern C++20/23/26 idioms with security-focused replacements for legacy patterns.
trailofbitswriting-lean-proofs
Writes and reviews structured Lean 4 proofs following Mathlib conventions.
trailofbitsopen-sourcing
Prepares repositories for public release with secrets audits, licensing, and CI-driven release automation.
trailofbitsgoal-prompt
Drafts and formats copy-ready /goal commands for goal mode in Claude Code and Codex.
trailofbitspr-improver
Runs an autonomous review-and-fix loop over branch changes until PR review passes.
trailofbitsskill-improver
Runs an autonomous review-and-fix loop over Claude Code skills until review passes.
trailofbitscode-improver
Runs an autonomous review-and-fix loop over a code target using a user-named reviewer.
trailofbitsburpsuite-project-parser
Search and extract HTTP traffic and audit findings from Burp Suite project files.
trailofbitsgit-cleanup
Categorize local git branches and worktrees for safe deletion.
trailofbitschrome-mcp-troubleshooting
Diagnose and resolve Claude Chrome MCP extension connectivity conflicts.
trailofbitszeroize-audit
Detect missing zeroization of sensitive data in C/C++/Rust code.
trailofbitsc-review
Review C/C++ code for memory safety, integer overflows, and race conditions.
trailofbitsseatbelt-sandboxer
Generate and iteratively test Seatbelt sandbox profiles for macOS applications.
trailofbitsaudit-augmentation
Integrates SARIF and weAudit static analysis findings into code graphs for security analysis.
trailofbitsgenotoxic
Categorizes mutation testing results using graph analysis to identify false positives, missing coverage, and fuzzing targets.
trailofbitstrailmark
Analyze source code for security vulnerabilities using code graphs.
trailofbitsmermaid-to-proverif
Translate Mermaid sequence diagrams into ProVerif formal verification models.
trailofbitsgraph-evolution
Detect security-relevant structural changes in code graphs between two snapshots.
Frequently Asked Questions About Trail of Bits
FAQPage SchemaWhat specific security tasks can I perform using these capabilities?▼
You can execute memory safety audits for C/C++/Rust, perform coverage-guided fuzzing with libFuzzer and AFL++, validate cryptographic implementations against Wycheproof vectors, and conduct structural security analysis of smart contracts using custom vulnerability scanners.
Which engineering personas benefit most from these security capabilities?▼
These capabilities are designed for security researchers, smart contract auditors, and systems engineers who require deep visibility into binary structures, memory safety, and cryptographic correctness within high-stakes production environments.
What are the primary dependencies for running these security analysis tasks?▼
Most tasks require standard development environments with support for LLVM/GCC instrumentation, specific language runtimes like Rust or Python, and access to analysis frameworks such as CodeQL, Semgrep, or IDA Pro for binary decompilation.