#6969th of 98 in Skills, plugins and rules
skills
Trail of Bits plugin marketplace of security and testing skills for Claude Code
- Stars
- 7.4k
- License
- CC-BY-SA-4.0
- Last commit
- Sep 2026
- Language
- Python
Missed the latest GitHub check; these facts may be older.
Overview
A Claude Code plugin marketplace from Trail of Bits that bundles skills for security auditing, testing and development workflows. Plugins cover smart contract review, C/C++ and Rust review, Semgrep and CodeQL, fuzzing, mutation testing, constant-time analysis and YARA rules. Codex can load it through its Claude marketplace compatibility, and a ChatGPT workspace import uses the marketplace.json.
Who it is for: Security auditors and engineers using Claude Code or Codex for code review
Strengths
- Installs with one command: /plugin marketplace add trailofbits/skills
- Broad security coverage: smart contracts, C/C++, Rust, Semgrep, CodeQL, fuzzing, YARA
- Also loads in Codex through its Claude marketplace compatibility
- Includes a trophy case with a documented bug found in ML-DSA signing
Weaknesses
- CC-BY-SA-4.0 share-alike license may constrain reuse inside proprietary repos
- Security focus; several plugins are unrelated to general coding (Tarot, Culture Index)
- ChatGPT imports need extra interface fields in agents/openai.yaml
- No tagged releases; versioning is by commit
What it needs
- no GPU
- Needs Claude Code or Codex
Also in Skills, plugins and rules
See all 98| Rank | Project | Score |
|---|---|---|
| 1 | skillsAgent skills for planning, TDD, debugging and code review | 94 out of 100 |
| 2 | eccAgents, skills, hooks and rules bundle for Claude Code, Codex and other harnesses | 94 out of 100 |
| 3 | cavemanCuts token use in coding agents with terse replies and compressed inputs | 94 out of 100 |
| #4 | impeccableDesign skill with 24 commands and a detector for AI-generated frontends | 93 out of 100 |
| #5 | ponytailSkill prompt that makes coding agents write less code and add tests | 92 out of 100 |