trailofbits

by Trail of Bits

Configures mewt or muton campaigns, analyzes surviving mutants, and investigates bugs exposed by testing gaps. Use when setting up mutation testing, reviewing campaign results, identifying equivalent mutants, or finding bugs from surviving mutations.

by Evan Sultanik

Prepares a repository for public open-source release: secrets-history hygiene, license selection, documentation and CI readiness checks, and language-specific packaging and release guidance.

by Fixture Author

Eval-only stand-in for the plugin-dev plugin: provides a skill-reviewer agent so cases exercising the skill-improver entry can run inside the isolated eval workspace, where the real marketplace plugin is not installed.

by Scott Arciszewski

Validates security patches against the reported bug, root-cause variants, and surrounding behavior. Returns reproducible failures to repair and validation gaps, with pinned inputs and saved evidence. Bundles a validate-patch dynamic workflow for Claude Code.

by Fixture Author

Eval-only stand-in for the pr-review-toolkit plugin: provides a review-pr skill so cases exercising the pr-improver entry can run inside the isolated eval workspace, where the real plugin is not installed.

by Henrik Brodin

Write, review, and triage property-based tests — Hypothesis, fast-check, proptest, and Echidna or Medusa for Solidity invariants

by Fixture Author

Eval-only reviewer that orchestrates specialist subagents: provides the panel-review skill plus two auditor agents, so cases can prove the improvement loop executes a reviewer skill's dispatch plan instead of flattening it into one context.

by Facundo Tuesca

Generates an interactive HTML walkthrough for reviewing code changes. Use only when explicitly called.

by Andrea Cappa (Aptos Labs) & Paweł Płatek (Trail of Bits)

Comprehensive Rust security code review with specialized bug-finding agents covering the safe/unsafe boundary, memory safety in unsafe blocks, concurrency, panic-induced DoS, recursion-induced stack overflow, FFI, and async runtime hazards

by Dan Guido

Gets independent code reviews from Codex or Antigravity for uncommitted changes, branch diffs, and commits.

by Maciej Domanski

Create custom Semgrep rules for detecting bug patterns and security vulnerabilities

by Maciej Domanski

Creates language variants of existing Semgrep rules with proper applicability analysis and test-driven validation

by Trail of Bits

Identify error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes

by Omar Inuwa

Check code against the documentation that specifies it: one agent per requirement, divergences refuted before they are reported, evidence cited to the line

by Axel Mierczuk & Paweł Płatek

Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection

by Eric Quintero

Audit a project's npm, PyPI, and Go dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree, abandoned upstreams, npm publisher concentration, and install scripts

by Paweł Płatek

Skills from the Trail of Bits Application Security Testing Handbook (appsec.guide)

by Scott Arciszewski

Builds source and binary code graphs for security analysis, context slicing, mutation testing, cryptographic protocol modeling, finding triage, and variant analysis.

by Axel Mierczuk

Find similar vulnerabilities and bugs across codebases using pattern-based analysis

by Alexis Challande

Principled framework for triaging vulnerability reports using 7 brocards (rules of thumb). Evaluates incoming CVEs, bug bounty submissions, and security findings against structured dismissal/acceptance criteria before escalating to deeper analysis.

by Fredrik Dahlgren

Structured Lean 4 proof writing and library design following Mathlib conventions

by Trail of Bits

YARA-X detection rule authoring with linting and quality analysis

by Trail of Bits

Detects missing or compiler-optimized zeroization of sensitive data with assembly and control-flow analysis