testing-handbook-generator

Generates Claude Code skills from the Trail of Bits Testing Handbook content.

Updated Apr 5, 2026
One-click install
npx skills add https://github.com/marumo333/atrox --skill testing-handbook-generator-marumo333
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: testing-handbook-generator
Source: https://github.com/marumo333/atrox/tree/main/.claude/skills/trailofbits/plugins/testing-handbook-skills/skills/testing-handbook-generator
Command: npx skills add https://github.com/marumo333/atrox --skill testing-handbook-generator-marumo333

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve? Manually converting security testing documentation into structured, discoverable Claude Code skills is slow and error-prone. This meta-skill automates the analysis of the Trail of Bits Testing Handbook (appsec.guide) and generates validated, cross-referenced skills for security testing tools and techniques. ## Core Features & Use Cases - Handbook Discovery and Planning: Scans the handbook repository, classifies sections by skill type (tool, fuzzer, technique, domain), and presents a generation plan for user approval. - Two-Pass Parallel Generation: Spawns parallel agents to generate skill content, then populates cross-references between skills in a second pass to avoid broken links. - Validation and Self-Improvement: Runs an automated validator on generated skills, updates the repository README with a skills table and mermaid cross-reference graph, and captures lessons to improve templates. - Use Case: A security engineer wants Claude Code skills for libFuzzer, AFL++, and Semgrep. Invoke this skill, approve the generated plan, and receive validated skills with proper frontmatter, Hugo shortcode conversion, and working cross-references. ## Quick Start Use the testing-handbook-generator skill to generate skills from the testing handbook.

Frequently Asked Questions about testing-handbook-generator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate Claude Code skills from the Trail of Bits Testing Handbook?▼

Invoke the testing-handbook-generator skill and it will locate the handbook repository, scan its sections, classify skill candidates by type, and present a generation plan. After your approval, it generates skills in parallel using type-specific templates and validates the results.

What skill types can be generated from security testing documentation?▼

Four skill types are supported: tool skills for static analysis tools like Semgrep and CodeQL, fuzzer skills for libFuzzer and AFL++, technique skills for cross-cutting methods like harness writing and sanitizers, and domain skills for areas like cryptographic testing.

Can I regenerate a single skill without re-running the entire batch?▼

Yes, single-skill regeneration is supported by specifying the skill name and handbook section path. The workflow re-reads the section, applies the template, updates cross-references for that skill only, and runs the validator on just that skill.

Why are some handbook sections skipped during skill generation?▼

Sections are skipped when they have draft: true in frontmatter, contain insufficient content, or describe GUI-only tools like Burp Suite that Claude cannot operate. Skipped sections are listed in the plan with their exclusion reasons.

How are Hugo shortcodes handled when converting handbook content?▼

Hugo shortcodes are converted to standard Markdown: hints become blockquotes, tabs become headings, relref links become plain text references, and videos are reduced to title and URL only. The validator confirms no shortcode patterns remain in generated skills.

What happens when a generated skill exceeds the line count limit?▼

Skills have a 500-line hard limit with splitting triggered above 450 lines. Large sections like installation, advanced usage, and CI integration are extracted into supporting files, and the SKILL.md becomes a router with a decision tree linking to them.