Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

Collection of agent skills to find vulnerabilities inside your web/mobile apps.

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.

Agent-assisted maintainership and development framework for Apache projects — Triage, Mentoring, Drafting (agent-authored fixes with human review), and Pairing (developer-side dev-cycle) skills shipping; Agentic Autonomous (auto-merge) on the roadmap.

A SKILL.md for ipsw

The AI security agent guards your code.

AI-powered bug bounty hunting toolkit that works with or without subscription.

Security testing that runs inside the coding agent you already use. Source-available, not open source.

Open-source AI security scanner for Codex, Claude Code, and ACP-compatible coding agents—kept current with OpenAI Codex Security.