Dan Guido
b955de4499
Reframes the repo as Trail of Bits' approved skills list with three paths: use an approved marketplace, request approval of a new one, or submit an individual skill via PR. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Curated Skills Marketplace
Trail of Bits' reviewed and approved Claude Code plugins. Every skill and marketplace here has been vetted for quality and safety.
Why This Exists
We don't want people at Trail of Bits installing random plugins from GitHub repos we haven't reviewed. Published skills have been found with backdoors and malicious hooks, and the ecosystem has no built-in quality gate. This repo is how we solve that problem internally.
Everything here has been code-reviewed by Trail of Bits staff. We're sharing it publicly so the broader community benefits from the same vetting.
Installation
/plugin marketplace add trailofbits/skills-curated
/plugin menu
How It Works
There are three ways to get a skill approved for use:
1. Use an approved marketplace
The marketplaces below have been reviewed and are approved for use. Install plugins from them directly.
| Marketplace | Focus |
|---|---|
| trailofbits/skills | Trail of Bits security research and audit skills |
| anthropics/knowledge-work-plugins | Anthropic's official knowledge work plugins |
| obra/superpowers | Advanced workflow patterns, TDD enforcement, multi-skill orchestration |
| EveryInc/compound-engineering-plugin | Production engineering workflows and multi-agent review |
| coreyhaines31/marketingskills | Marketing-focused skills |
2. Request approval of a new marketplace
Found a marketplace not on the list? Open an issue requesting approval. Include the repo URL and what you're using it for. We'll review it and add it to the approved list if it passes.
3. Submit an individual skill
Using a skill from an unapproved source? Open a PR to add it here. See CLAUDE.md for authoring guidelines. Every PR gets code review — we read every line of hooks and scripts.
Once merged, the skill is available to all Trail of Bits employees and anyone else using this marketplace.
Available Plugins
Writing
| Plugin | Description |
|---|---|
| humanizer | Identifies and removes AI writing patterns to make text sound natural |
Development
| Plugin | Description |
|---|---|
| skill-extractor | Extract reusable skills from work sessions |
License
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.