testing-handbook-generator

Analyze the Trail of Bits Testing Handbook and generate Claude Code skills for security testing tools.

Updated Jul 10, 2025
One-click install
npx skills add https://github.com/Superlend/superloop-core-contracts --skill testing-handbook-generator
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: testing-handbook-generator
Source: https://github.com/Superlend/superloop-core-contracts/tree/main/.cursor/skills/testing-handbook-skills/skills/testing-handbook-generator
Command: npx skills add https://github.com/Superlend/superloop-core-contracts --skill testing-handbook-generator

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill analyzes the Trail of Bits Testing Handbook (appsec.guide) and generates Claude Code skills for security testing tools and techniques. It helps teams create, maintain, and refresh Claude Code skills directly from handbook content.

Core Features & Use Cases

  • Parses handbook structure to identify candidate security-testing skills
  • Generates per-skill SKILL.md files using templates for tool, fuzzer, technique, and domain skills
  • Supports two-pass generation to resolve cross-skill relationships and Related Skills
  • Integrates with handbook resources (99-resources.md/91-resources.md) and uses WebFetch for non-video content
  • Provides a plan and activation steps to users before creation of skill units

Quick Start

Run the testing-handbook-generator to produce the initial set of Claude Code skills from the handbook. The generator will present a plan, await approval, and then create per-skill directories under: plugins/testing-handbook-skills/skills/{skill-name}/SKILL.md

Frequently Asked Questions about testing-handbook-generator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate Claude Code skills from a security testing handbook?

The generator parses the Trail of Bits Testing Handbook structure to identify candidate security-testing techniques, then outputs per-skill SKILL.md files using predefined templates for fuzzing, static-analysis, crypto, and web sections.

What is the process for automating security testing skill creation from appsec guides?

Automating security testing skill creation involves a two-pass generation process: the first pass creates initial skill units, and the second resolves cross-skill relationships and Related Skills references before outputting the final SKILL.md files.

Can I bulk update Claude Code skills directly from handbook content?

Yes, you can bulk update Claude Code skills by applying the generator to handbook sections under fuzzing, static-analysis, crypto, and web, which refreshes or creates per-skill directories automatically.

Does the skill generator support extracting resources from non-video handbook content?

Yes, the skill generator integrates with handbook resources like 99-resources.md and 91-resources.md, using WebFetch to extract and integrate non-video content into the generated SKILL.md files.

What are the limitations when generating cross-references between security testing skills?

A limitation is that resolving cross-references requires a two-pass generation approach, meaning you cannot accurately generate all cross-skill relationships in a single pass without missing Related Skills placeholders.