Trail of Bits Skills
Official security testing skills from Trail of Bits, creators of Slither, Echidna, and Medusa.
A Claude Code plugin marketplace providing skills for AI-assisted security analysis, testing, and development workflows. Includes smart contract vulnerability scanners for 6+ blockchains (Solidity, Cairo, Solana, TON, Cosmos, Substrate, Algorand), property-based testing guidance, static analysis with CodeQL and Semgrep, audit preparation, and security-focused code review tools.
Installation
/plugin marketplace add trailofbits/skills
Or browse and install individual plugins:
/plugin menu
Available Security Skills
Smart Contract Security
- building-secure-contracts - Vulnerability scanners for Solidity, Cairo, Solana, TON, Cosmos, Substrate, Algorand
- entry-point-analyzer - Identify state-changing entry points for security auditing
- token-integration-analyzer - ERC20/ERC721 conformity and weird token pattern detection
Code Auditing
- audit-context-building - Ultra-granular code analysis for audit context
- differential-review - Security-focused review of code changes
- variant-analysis - Find similar vulnerabilities across codebases
- static-analysis - CodeQL, Semgrep, and SARIF parsing toolkit
- supply-chain-risk-auditor - Audit dependency supply-chain risks
Verification
- property-based-testing - Property-based testing for multiple languages and smart contracts
- spec-to-code-compliance - Specification-to-code compliance checker
- constant-time-analysis - Detect timing side-channels in cryptographic code
Links
1---2name: trailofbits-skills3description: Security testing skills from creators of Slither, Echidna, Medusa. Smart contract vulnerability scanners, property-based testing, static analysis, and audit tools from Trail of Bits.4---56# Trail of Bits Skills78Official security testing skills from Trail of Bits, creators of Slither, Echidna, and Medusa.910A Claude Code plugin marketplace providing skills for AI-assisted security analysis, testing, and development workflows. Includes smart contract vulnerability scanners for 6+ blockchains (Solidity, Cairo, Solana, TON, Cosmos, Substrate, Algorand), property-based testing guidance, static analysis with CodeQL and Semgrep, audit preparation, and security-focused code review tools.1112## Installation1314```15/plugin marketplace add trailofbits/skills16```1718Or browse and install individual plugins:19```20/plugin menu21```2223## Available Security Skills2425### Smart Contract Security26- **building-secure-contracts** - Vulnerability scanners for Solidity, Cairo, Solana, TON, Cosmos, Substrate, Algorand27- **entry-point-analyzer** - Identify state-changing entry points for security auditing28- **token-integration-analyzer** - ERC20/ERC721 conformity and weird token pattern detection2930### Code Auditing31- **audit-context-building** - Ultra-granular code analysis for audit context32- **differential-review** - Security-focused review of code changes33- **variant-analysis** - Find similar vulnerabilities across codebases34- **static-analysis** - CodeQL, Semgrep, and SARIF parsing toolkit35- **supply-chain-risk-auditor** - Audit dependency supply-chain risks3637### Verification38- **property-based-testing** - Property-based testing for multiple languages and smart contracts39- **spec-to-code-compliance** - Specification-to-code compliance checker40- **constant-time-analysis** - Detect timing side-channels in cryptographic code4142## Links4344- **GitHub**: https://github.com/trailofbits/skills45- **Trail of Bits**: https://www.trailofbits.com46- **Building Secure Contracts**: https://secure-contracts.com
yejiming