Skill

Trail of Bits

Skill

Security skills from people who get paid to break it.

Official Trail of Bits skills for review habits that are not a linter with opinions.

spec·MIT·Updated this quarter·github.com/trailofbits

Claude CodeCursorDesktop

Scanned

npx skills add trailofbits/skills

Input

A change or a service.

Output

A finding with a path to fix.

tob-security.skill/invoke

You say

Threat-model the new webhook.

It returns

Replay and SSRF. Two tests to add. No auth on the retry path.

Prompt notebook

Prompts this skill is built for.

You say
Threat-model the new webhook.
It returns
Replay and SSRF. Two tests to add. No auth on the retry path.
You say
Anything secret in this diff?
It returns
A live key in a fixture. Rotate. Pre-commit hook added.

Maker

Trail of Bits

@trailofbits · Lab

No notes yet. Be the first hunter to report back.