trailmark
claudeBuilds source and binary code graphs for security analysis, taint modeling with native analyzers, context slicing, mutation testing, cryptographic protocol modeling, finding triage, and variant analysis.
15 skills · 1 agent
Comprehensive C/C++ security code review, with coverage verified against a parse of the source
Plugin c-review from marketplace trailofbits in trailofbits/skills. Commands read from the repo's manifest — today.
c-reviewPerforms comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities. Use when auditing native C/C++ applications, reviewing daemons or services for memory safety, or hunting integer overflow / use-after-free / race conditions
c-review-workerRuns one c-review producing task — a location slice, the class sweep, the invariant audit or the dedup pass — reading source and writing exactly one part file. Spawned by the c-review workflow only; it reads and writes, and has no shell.
Builds source and binary code graphs for security analysis, taint modeling with native analyzers, context slicing, mutation testing, cryptographic protocol modeling, finding triage, and variant analysis.
15 skills · 1 agent
Skills from the Trail of Bits Application Security Testing Handbook (appsec.guide)
15 skills
Detects missing or compiler-optimized zeroization of sensitive data with assembly and control-flow analysis
1 skill · 11 agents · 1 MCP server
Comprehensive smart contract security toolkit based on Trail of Bits' Building Secure Contracts framework. Includes vulnerability scanners for 6 blockchains and 5 development guideline assistants.
11 skills
Agent-orchestrated skills for finding, reproducing and adjudicating regressions in PRs or commits.
7 skills
Audits code for unit and decimal-scaling bugs and annotates it with dimensional comments recording the units of each value. Use when someone asks to audit or review code for unit confusion, decimals or scaling mismatches, WAD/RAY scale errors, or the wrong token's decimals; to annotate units in a codebase; or to perform a dimensional analysis of a DeFi protocol, offchain code, or other arithmetic-heavy codebase. Catches formulas that combine values carrying different units or scales.
1 skill · 5 agents
Matt Pocock's agent skills for real engineering (grilling, spec/ticket flows, TDD, code review, domain modelling and more).
39 skills
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Automated code review for pull requests using multiple specialized agents with confidence-based scoring to filter false positives
1 command
Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
Use Alibaba Open Code Review from local Codex.
2 skills
Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.
12 skills
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.