trailmark
claudeBuilds source and binary code graphs for security analysis, taint modeling with native analyzers, context slicing, mutation testing, cryptographic protocol modeling, finding triage, and variant analysis.
15 skills · 1 agent
8,166
claude
static-analysis
Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection
/
Plugin static-analysis from marketplace trailofbits in trailofbits/skills. Commands read from the repo's manifest — today.
What it installs
Skills (3)
codeqlScans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "build codeql database", "SAST scan", "taint analysis", "dataflow analysis", or "find vulnerabilities in this repo". Covers Python, JavaScript/
sarif-parsingParses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other scanners. Triggers on "parse sarif", "read scan results", "aggregate findings", "deduplicate alerts", or "process sarif output". Handles filtering, deduplication, format conversion, and CI/CD integration of SA
semgrepRuns a Semgrep security scan over a codebase: detects languages, selects rulesets, presents the plan for explicit approval, then runs every approved ruleset through scripts/run-scans.sh, which batches the semgrep processes and writes scans.json, and merges the output to SARIF. Supports two scan mode
More from trailofbits/skills
All 47 plugins →testing-handbook-skills
claudeSkills from the Trail of Bits Application Security Testing Handbook (appsec.guide)
15 skills
8,166
zeroize-audit
claudeDetects missing or compiler-optimized zeroization of sensitive data with assembly and control-flow analysis
1 skill · 11 agents · 1 MCP server
8,166
Comprehensive smart contract security toolkit based on Trail of Bits' Building Secure Contracts framework. Includes vulnerability scanners for 6 blockchains and 5 development guideline assistants.
11 skills
8,166
regression-hunt
claudeAgent-orchestrated skills for finding, reproducing and adjudicating regressions in PRs or commits.
7 skills
8,166
dimensional-analysis
claudeAudits code for unit and decimal-scaling bugs and annotates it with dimensional comments recording the units of each value. Use when someone asks to audit or review code for unit confusion, decimals or scaling mismatches, WAD/RAY scale errors, or the wrong token's decimals; to annotate units in a codebase; or to perform a dimensional analysis of a DeFi protocol, offchain code, or other arithmetic-heavy codebase. Catches formulas that combine values carrying different units or scales.
1 skill · 5 agents
8,166
Maintain static-analysis?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins47 plugins