</>MCP Agents Market
Plugin

skills

by trailofbits6.8kPythonUpdated 2026-08-25

Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

Claude CodeCodex

Trail of Bits Skills is a comprehensive Claude Code plugin marketplace containing over 40 specialized security research and development plugins. Created by Trail of Bits, the collection provides AI-enhanced capabilities for smart contract auditing, code security review, malware analysis, formal verification, and vulnerability detection across multiple languages and blockchain platforms. The plugins integrate with both Claude Code and Codex, offering workflows for everything from YARA rule authoring to mutation testing and supply chain risk assessment. Developers can install the entire marketplace with a single command and selectively enable individual plugins for their specific audit and development tasks.

Key Features

Over 40 specialized plugins covering smart contract security, code auditing, malware analysis, verification, and reverse engineering
Multi-language security review tools including dedicated plugins for C/C++, Rust, and Solidity with SARIF output
Smart contract vulnerability scanning across six blockchain platforms with state-changing entry point identification
Integrated static analysis toolkit with CodeQL, Semgrep rule creation, and variant analysis capabilities
Supply chain security auditing for npm, PyPI, and Go dependencies with advisory matching and risk detection
Formal verification tools including Lean 4 proof writing, property-based testing, and constant-time cryptographic analysis
Development workflow plugins for GitHub triage, devcontainer setup, and git branch cleanup
Compatible with both Claude Code and Codex clients with unified marketplace installation

Use Cases

  • 01Conducting comprehensive security audits of smart contracts across Ethereum, Solana, and other blockchain platforms
  • 02Performing parallel code reviews of C/C++ and Rust codebases with automated vulnerability detection and SARIF reporting
  • 03Creating and refining custom Semgrep rules for organization-specific vulnerability patterns
  • 04Auditing software dependencies for known vulnerabilities, abandoned packages, and supply chain risks
  • 05Writing and verifying formal proofs in Lean 4 following Mathlib conventions
  • 06Analyzing Android APKs for Firebase misconfigurations and security issues

Related Plugins

View more

andrej-karpathy-skills

A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls.

Plugin216.1k

claude-mem

Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More

Plugin95k

Understand-Anything

Graphs that teach > graphs that impress. Turn any code into an interactive knowledge graph you can explore, search, and ask questions about. Works with Claude Code, Codex, Cursor, Copilot, Gemini CLI, and more.

Plugin84.9k

rtk

CLI proxy that reduces LLM token consumption by 60-90% on common dev commands. Single Rust binary, zero dependencies

Plugin82.1k

skills — FAQ

What is Trail of Bits Skills?+

Trail of Bits Skills is a Claude Code plugin marketplace containing over 40 specialized plugins for AI-assisted security research, vulnerability detection, code auditing, and development workflows. It provides tools for smart contract analysis, static analysis, malware detection, formal verification, and more.

How do I install the Trail of Bits Skills marketplace in Claude Code?+

Use the command '/plugin marketplace add trailofbits/skills' to add the marketplace, then run '/plugin menu' to browse and install individual plugins. Each plugin can be installed selectively based on your needs.

Which AI clients support Trail of Bits Skills?+

The plugin marketplace works with Claude Code and Codex. Codex has native Claude marketplace compatibility, allowing direct installation without additional configuration.

Do I need API keys or special prerequisites to use these plugins?+

Most plugins require the underlying security tools they wrap (such as Semgrep, CodeQL, Burp Suite, or blockchain analysis tools) to be installed separately. Specific prerequisites vary by plugin and are documented in each plugin's individual README.

Is Trail of Bits Skills free to use?+

Yes, the plugin marketplace is open source and licensed under Creative Commons Attribution-ShareAlike 4.0 International License. Individual plugins may depend on third-party tools that have their own licensing terms.

Can I use Trail of Bits Skills for local development and testing?+

Yes, you can add the marketplace locally by navigating to the parent directory of the cloned repository and running '/plugins marketplace add ./skills' for local testing and development workflows.

How do I install skills?+

Open the source repository on GitHub and follow its README. skills is a plugin — MCP Agents Market links you directly to the official repo.

Is skills free?+

skills is an open-source project hosted on GitHub. Check the repository for its license and any usage requirements.

Related searches

Security PluginsCode Review PluginsDeveloper Tools PluginsBest MCP ServersBest SkillsBest AgentsTop rated listingsClaude Code toolsBrowse all categories