skills

Why we included this project

Security teams using AI coding agents get something concrete here: Trail of Bits has packaged its audit experience into Claude Code plugins, each aimed at a specific security task rather than one vague all-purpose tool. The collection spans smart-contract vulnerability scanners, C/C++ review pipelines that emit SARIF, GitHub Actions workflow auditing, and differential review of code changes against git history, so an agent follows real methodology instead of generic advice. It installs through the Claude Code plugin system and works with Codex through marketplace compatibility, which makes it simple to add to existing agent setups. Since the plugins come from an established security research firm, they read like documented playbooks, useful for raising an audit team's output and giving less experienced reviewers a structured place to start.