今日热榜中文
← Back to plugins

Task skills

Trail of Bits Skills

trailofbits/skills

Give AI security-review workflows for code changes, dependencies, and testing.

View source code ↗Setup and usage guide ↗

Introduction

Prepared by 今日热榜 from public project documentation

Trail of Bits packages security review and testing methods as installable instructions for coding assistants. Select skills for reviewing changes, risky defaults, dependencies, or scanning tools, and ask the assistant to document evidence and coverage. Installing the pack does not certify a project as secure. Skills that use tools such as Semgrep or CodeQL require those tools separately; some capabilities may need an account or paid authorization.

Ways to use it

  • Review changes with code and Git-history evidence
  • Choose dependency, configuration, or testing skills
  • Prepare required scanners and document review coverage

The project’s original description

Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

Introductions are based on public project documentation. These projects have not each been installed and tested here. Check the project documentation for setup, compatibility and service costs. Refreshing this list only reads saved data; it does not start collection.

More projects of this type

These other listed projects can help you compare use cases and setup requirements.

  • Superpowers — Give AI a development workflow for clarifying requirements, planning, coding, and checking results.
  • Marketing Skills — Give AI workflows for website copy, SEO reviews, and conversion improvements.
  • Obsidian Skills — Give AI Obsidian guidance for linked notes, properties, canvases, and database-style views.

Sources and ranking

This directory lists AI development plugins with public source code and a clear purpose. Browse by task, then open an introduction to learn what a project does, who it is for, and what you need to get started. It covers selected projects, not every AI plugin.

How do the three plugin types differ?

Tool connections (MCP) let AI assistants use external tools such as browsers, code repositories and databases. MCP is the protocol used for these connections.

Reusable skills give a compatible AI assistant instructions and guidance for a particular task.

Editor plugins run inside the software you use to write code, adding AI chat, completions or suggested edits.

How does “Most starred” work?

Projects are sorted by their total GitHub stars. Stars indicate interest; they are not downloads, active users or quality scores. A skill pack counts as one project. Daily star growth is not shown without historical records.

What does “Recently updated” mean?

It uses the most recent code push, which may not be a new release. The 7-day filter checks that project update time; ranking still uses all-time stars. Each introduction shows when its star count was collected. Failed updates keep the last saved data.

Introductions are based on public project documentation. These projects have not each been installed and tested here. Check the project documentation for setup, compatibility and service costs. Refreshing this list only reads saved data; it does not start collection.

UTC+8