claude

insecure-defaults

Detects insecure default configurations including hardcoded credentials, fallback secrets, weak authentication defaults, and dangerous values in production

8,166 on GitHubby Trail of Bitsv2.0.3CC-BY-SA-4.0updated today
/

Plugin insecure-defaults from marketplace trailofbits in trailofbits/skills. Commands read from the repo's manifest — today.

What it installs

Slash commands (1)

  • /insecure-defaults:audit

    Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open switches, weak crypto, permissive access, debug leakage. Parallel sweeps collect candidates, then a refuting verifier traces each one to the security decision it reaches before

View source on GitHub

More from trailofbits/skills

All 47 plugins →

trailmark

claude

Builds source and binary code graphs for security analysis, taint modeling with native analyzers, context slicing, mutation testing, cryptographic protocol modeling, finding triage, and variant analysis.

15 skills · 1 agent

8,166

Skills from the Trail of Bits Application Security Testing Handbook (appsec.guide)

15 skills

8,166

Detects missing or compiler-optimized zeroization of sensitive data with assembly and control-flow analysis

1 skill · 11 agents · 1 MCP server

8,166

Comprehensive smart contract security toolkit based on Trail of Bits' Building Secure Contracts framework. Includes vulnerability scanners for 6 blockchains and 5 development guideline assistants.

11 skills

8,166

Agent-orchestrated skills for finding, reproducing and adjudicating regressions in PRs or commits.

7 skills

8,166

Audits code for unit and decimal-scaling bugs and annotates it with dimensional comments recording the units of each value. Use when someone asks to audit or review code for unit confusion, decimals or scaling mismatches, WAD/RAY scale errors, or the wrong token's decimals; to annotate units in a codebase; or to perform a dimensional analysis of a DeFi protocol, offchain code, or other arithmetic-heavy codebase. Catches formulas that combine values carrying different units or scales.

1 skill · 5 agents

8,166

Maintain insecure-defaults?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins47 plugins