claude

testing-handbook-skills

Skills from the Trail of Bits Application Security Testing Handbook (appsec.guide)

0 on GitHubby Paweł Płatekv1.0.2CC-BY-SA-4.0updated 4 months ago
/

Plugin testing-handbook-skills from marketplace trailofbits in RUSHYOP/mirror-trailofbits-skills. Commands read from the repo's manifest — 1 month ago.

What it installs

Skills (15)

  • address-sanitizer

    AddressSanitizer detects memory errors during fuzzing. Use when fuzzing C/C++ code to find buffer overflows and use-after-free bugs.

  • aflpp

    AFL++ is a fork of AFL with better fuzzing performance and advanced features. Use for multi-core fuzzing of C/C++ projects.

  • atheris

    Atheris is a coverage-guided Python fuzzer based on libFuzzer. Use for fuzzing pure Python code and Python C extensions.

  • cargo-fuzz

    cargo-fuzz is the de facto fuzzing tool for Rust projects using Cargo. Use for fuzzing Rust code with libFuzzer backend.

  • constant-time-testing

    Constant-time testing detects timing side channels in cryptographic code. Use when auditing crypto implementations for timing vulnerabilities.

  • coverage-analysis

    Coverage analysis measures code exercised during fuzzing. Use when assessing harness effectiveness or identifying fuzzing blockers.

  • fuzzing-dictionary

    Fuzzing dictionaries guide fuzzers with domain-specific tokens. Use when fuzzing parsers, protocols, or format-specific code.

  • fuzzing-obstacles

    Techniques for patching code to overcome fuzzing obstacles. Use when checksums, global state, or other barriers block fuzzer progress.

  • harness-writing

    Techniques for writing effective fuzzing harnesses across languages. Use when creating new fuzz targets or improving existing harness code.

  • libafl

    LibAFL is a modular fuzzing library for building custom fuzzers. Use for advanced fuzzing needs, custom mutators, or non-standard fuzzing targets.

  • libfuzzer

    Coverage-guided fuzzer built into LLVM for C/C++ projects. Use for fuzzing C/C++ code that can be compiled with Clang.

  • ossfuzz

    OSS-Fuzz provides free continuous fuzzing for open source projects. Use when setting up continuous fuzzing infrastructure or enrolling projects.

  • ruzzy

    Ruzzy is a coverage-guided Ruby fuzzer by Trail of Bits. Use for fuzzing pure Ruby code and Ruby C extensions.

  • testing-handbook-generator

    Meta-skill that analyzes the Trail of Bits Testing Handbook (appsec.guide) and generates Claude Code skills for security testing tools and techniques. Use when creating new skills based on handbook content.

  • wycheproof

    Wycheproof provides test vectors for validating cryptographic implementations. Use when testing crypto code for known attacks and edge cases.

View source on GitHub

More from RUSHYOP/mirror-trailofbits-skills

All 40 plugins →

zeroize-audit

claude

Detects missing or compiler-optimized zeroization of sensitive data with assembly and control-flow analysis

1 skill · 11 agents · 1 MCP server

0

building-secure-contracts

claude

Comprehensive smart contract security toolkit based on Trail of Bits' Building Secure Contracts framework. Includes vulnerability scanners for 6 blockchains and 5 development guideline assistants.

11 skills

0

trailmark

claude

Builds multi-language source code graphs for security analysis: call graphs, attack surface mapping, blast radius, taint propagation, complexity hotspots, and entry point enumeration. Generates Mermaid diagrams (call graphs, class hierarchies, dependency maps, heatmaps). Compares code graph snapshots for structural diff and evolution analysis. Runs graph-informed mutation testing triage (genotoxic). Generates mutation-driven test vectors (vector-forge). Extracts crypto protocol message flows and converts Mermaid diagrams to ProVerif models. Projects SARIF and weAudit findings onto code graphs. Use when analyzing call paths, mapping attack surface, visualizing code architecture, triaging survived mutants, generating cryptographic test vectors, diagramming crypto protocols, formally verifying protocols, or augmenting audits with static analysis findings.

10 skills

0

dimensional-analysis

claude

Annotates codebases with dimensional analysis comments documenting units, dimensions, and decimal scaling. Use when someone asks to annotate units in a codebase, perform a dimensional analysis, or find vulnerabilities in a DeFi protocol. Prevents dimensional mismatches and catches formula bugs early.

1 skill · 5 agents

0

fp-check

claude

Systematic false positive verification for security bug analysis with mandatory gate reviews

1 skill · 3 agents · hooks

0

c-review

claude

Comprehensive C/C++ security code review with specialized bug-finding agents covering memory safety, type safety, concurrency, and Linux/Windows userspace-specific issues

1 skill · 3 agents

0

Maintain testing-handbook-skills?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins40 plugins