trailofbits-skills

admin/trailofbits-skills

Fork 0

mirror of https://github.com/trailofbits/skills synced 2026-06-21 14:12:00 +00:00

Commit Graph

Select branches

Hide Pull Requests

add-creview

adversarial-verification-plugin

ct-analyzer-search

darius-graham/skill-http-fuzz

feat/humanizer-skill

feat/opencode-support

feat/skill-discoverability

feat/skill-extractor

fix-semgrep-rule-creator-docs-reference

fix/fp-check-scope-hooks-to-skill

let-fate-decode-secrets-randunder

main

modern-cpp-plugin

trailmark-0.4

trailmark-assurance-skills

trailmark-finding-triage

trailmark-review-gate

trailmark-variant-neighborhood

#1

#10

#100

#101

#102

#103

#104

#106

#107

#108

#109

#11

#110

#112

#113

#114

#115

#116

#119

#120

#122

#123

#125

#126

#127

#128

#129

#13

#130

#132

#133

#134

#135

#136

#137

#139

#140

#142

#142

#144

#146

#147

#148

#148

#15

#151

#152

#153

#154

#155

#156

#158

#16

#160

#161

#161

#163

#165

#166

#167

#168

#168

#169

#17

#170

#173

#175

#177

#178

#178

#179

#182

#183

#183

#184

#185

#186

#187

#187

#188

#188

#19

#20

#21

#22

#23

#24

#25

#26

#27

#28

#28

#29

#3

#30

#31

#33

#34

#35

#36

#37

#38

#39

#4

#40

#41

#43

#44

#45

#46

#47

#48

#49

#5

#50

#52

#53

#54

#55

#56

#57

#58

#59

#6

#60

#61

#62

#64

#65

#67

#68

#69

#7

#70

#71

#73

#74

#75

#76

#77

#78

#79

#80

#81

#82

#83

#84

#85

#86

#87

#88

#89

#9

#90

#91

#92

#93

#95

#96

#97

#98

#99

edb65e6be4 fix(fp-check): scope completeness hooks to skill/agent frontmatter (#143) fix/fp-check-scope-hooks-to-skill Dan Guido 2026-06-15 09:05:04 -07:00
276e4bd1c1 trailmark: add assurance workflow skills trailmark-assurance-skills Scott Arciszewski 2026-06-11 15:48:22 -04:00
334cf90453 trailmark: add variant neighborhood skill trailmark-variant-neighborhood Scott Arciszewski 2026-06-11 15:11:17 -04:00
7f3682b571 trailmark: add review gate skill trailmark-review-gate Scott Arciszewski 2026-06-11 15:08:37 -04:00
bac82f54ab trailmark: add finding triage skill trailmark-finding-triage Scott Arciszewski 2026-06-11 15:04:05 -04:00
be058c7596 fix: resolve code review findings for PR #183 trailmark-0.4 Dan Guido 2026-06-11 14:13:53 -04:00
0e3ac86d86 Merge branch 'main' into trailmark-0.4 Scott Arciszewski 2026-06-10 16:12:41 -04:00
bfcf747c5e trailmark: update skills to use v0.4.0 features Scott Arciszewski 2026-06-10 16:08:30 -04:00
c070b9b588 fix(fp-check): use correct JSON response format in stop hooks (#129) main jonnydevs 2026-06-10 15:41:52 -04:00
64a8c3f00b Update second-opinion Codex model to gpt-5.5 (#163) Matthew Kern 2026-06-10 12:41:40 -07:00
5577119331 fix(semgrep-rule-creator): correct 404ing semgrep-docs links (#179) Jamie Reid 2026-06-10 13:34:58 -06:00
c910ecf739 Bump actions/checkout from 6.0.2 to 6.0.3 in the all group (#182) dependabot[bot] 2026-06-10 15:34:45 -04:00
d5fe2e6a78 feat(codex): add UI metadata for skills (#175) Lixin2026 2026-06-06 00:28:41 +08:00
f09e5c729a Remove legacy codex compatiblity scripts/shims. (#173) William Tan 2026-06-05 12:18:09 -04:00
c94841be3d Fix for when CLAUDE_PLUGIN_ROOT contains spaces (#169) Tim Lander 2026-05-28 03:53:26 +08:00
98b01ec8ff let-fate-decide: improved 12-card spread (100+ bits of entropy) (#166) Scott Arciszewski 2026-05-27 15:31:44 -04:00
a664194ea2 docs: address adversarial-verification review feedback adversarial-verification-plugin wizardengineer 2026-05-11 12:44:25 -04:00
593b27a98e Merge branch 'main' into adversarial-verification-plugin Dan Guido 2026-05-08 13:01:25 -04:00
a56045e9ae fix: correct duplicate section numbering in solana-vulnerability-scanner (#160) Leon.C 2026-05-06 05:36:48 +08:00
870955f1af C review (#156) Paweł Płatek 2026-05-03 21:59:55 +02:00
540111a52a Add adversarial-modeler agent to differential-review (#84) Dan Guido 2026-04-28 21:12:06 -04:00
5f0a765877 Add sharp-edges-analyzer agent to sharp-edges (#81) Dan Guido 2026-04-28 21:10:55 -04:00
48bd2626a1 Refresh trailmark skills for public Trailmark 0.2.x (#153) Scott Arciszewski 2026-04-28 21:04:14 -04:00
cad5abdc48 Sync skill with claude-code-devcontainer repo (#151) dm 2026-04-29 02:50:28 +02:00
debfb29c8e Fix allowed-tools to use spec-compliant space-delimited strings (#139) Jonathan Hefner 2026-04-28 18:50:30 -05:00
38793f6757 fix(gh-cli): exit 0 when CLAUDE_ENV_FILE is unset (#135) David Maynor 2026-04-28 19:28:59 -04:00
833dbef510 Add adversarial-verification plugin wizardengineer 2026-04-17 03:00:30 -04:00
e8cc5baf93 ci: run plugin Python test suites (catches the PR #125 regression) (#147) tob-joe 2026-04-16 18:15:04 -04:00
1efb11a08f let-fate-decide: add missing import (#144) Scott Arciszewski 2026-04-14 20:25:11 -04:00
e54b16fdb2 fix lints add-creview GrosQuildu 2026-03-27 14:08:02 +01:00
9ae826c3f6 add c-review skill GrosQuildu 2026-03-27 13:59:59 +01:00
4c9d5989a4 Add modern-cpp plugin for C++20/23/26 best practices modern-cpp-plugin wizardengineer 2026-04-01 14:01:32 -04:00
d7f76b532d Cosmos improve (#127) Paweł Płatek 2026-04-01 16:50:10 +02:00
17ba9fa3e9 Sast improve (#119) Paweł Płatek 2026-04-01 16:49:33 +02:00
40f192b390 let-fate-decide: replace os.urandom with secrets.randbelow (#125) tob-joe 2026-04-01 10:49:10 -04:00
635e186d1d Add draw agent for let-fate-decide (#134) tob-joe 2026-03-31 18:14:41 -04:00
af35cdeac9 init mutation-testing skill (#140) bohendo 2026-03-31 18:12:57 -04:00
6b79b5e879 feat(trailmark): skills that reason about code as graphs (#133) Scott Arciszewski 2026-03-31 17:31:30 -04:00
4b9a4e9087 docs(aflpp): add opinionated environment variables guide (#130) Tim Ren 2026-03-27 18:38:32 +08:00
9df47310d4 add dimensional analysis plugin (#132) Benjamin Samuels 2026-03-25 05:38:04 -07:00
34e8cbfbe2 Trim frontmatter description, sync README triggers, bump to 1.1.0 let-fate-decode-secrets-randunder Scott Arciszewski 2026-03-18 11:04:36 -04:00
d5ec330fbe Broaden let-fate-decide trigger patterns for vague/ambiguous prompts Scott Arciszewski 2026-03-18 10:58:59 -04:00
0f8f29ad21 Use secrets module instead of manual os.urandom() in let-fate-decide Scott Arciszewski 2026-03-18 10:53:42 -04:00
5c15f4f564 Add archetype deep profiles to culture-index skill (#126) Dan Guido 2026-03-17 13:50:09 -04:00
aab484c5b7 Add Codex-native skill installation support (#123) Artem Dinaburg 2026-03-16 14:29:40 -04:00
b1f2ed986b Improve skill-improver plugin's ability to locate skill-reviewer (#122) Tannr 2026-03-16 14:05:28 -04:00
8655937ac0 Add some improvements to semgrep-rule-creator (#116) mschwager 2026-03-16 11:45:31 -06:00
c6097699e4 Fix burpsuite-project-parser skill directory structure (#115) Dan Guido 2026-03-04 00:24:19 -05:00
dc3eb42b5f Downgrade skill dir name mismatch from error to warning feat/opencode-support Dan Guido 2026-03-03 21:15:44 -08:00
28e5f55c18 Fix shfmt version in CI to match pre-commit config (v3.12.0) Dan Guido 2026-03-03 21:08:05 -08:00
65b294103a Fix OpenCode installer: security, correctness, and code quality Dan Guido 2026-03-03 21:00:37 -08:00
0a54919c62 Add OpenCode compatibility installer for plugin workflows Vitor 2026-03-01 10:14:45 -03:00
00c013dba7 gh-cli: Replace skill with hooks-only enforcement (#114) William Tan 2026-03-03 20:28:44 -05:00
19c463e3f6 Import fp-check plugin from skills-internal (#113) Dan Guido 2026-03-03 11:40:15 -05:00
1a868d25d2 second-opinion: use Codex CLI's built-in MCP server (#110) Dan Guido 2026-02-27 01:03:31 -05:00
8f92c6dee0 Simpler sast (#104) Paweł Płatek 2026-02-26 17:30:21 +01:00
3b378ebd47 Import skill-improver plugin from skills-internal (#109) Dan Guido 2026-02-26 07:34:59 -08:00
ed41cd7ceb Import five plugins from skills-internal (#108) Dan Guido 2026-02-26 07:21:20 -08:00
52314112b9 fix(ct_analyzer): escape XML special chars in _compile_csharp() (#106) newklei 2026-02-26 09:07:19 -05:00
5468f6e76a Bump actions/setup-python from 5.6.0 to 6.2.0 in the all group (#107) dependabot[bot] 2026-02-25 12:36:15 -05:00
286b2fadb4 http-fuzz: add Step 7.5 Source-Assisted Fuzzing darius-graham/skill-http-fuzz Graham Sutherland 2026-02-21 01:07:10 +00:00
9ab632b0d2 feat(http-fuzz): session ordering safety + open redirect detection Graham Sutherland 2026-02-21 00:39:55 +00:00
ec0704daa9 fix(http-fuzz): clarify --threads/--delay-ms flags and WORK_DIR guidance Graham Sutherland 2026-02-21 00:06:51 +00:00
70fe988b88 docs(http-fuzz): add references/preview-settings.md Graham Sutherland 2026-02-20 23:48:43 +00:00
780970048a docs(http-fuzz): update docs to reflect --preview-length 0 as default Graham Sutherland 2026-02-20 23:48:27 +00:00
c684d3dcb6 test(http-fuzz): update tests for DEFAULT_PREVIEW_LENGTH = 0 Graham Sutherland 2026-02-20 23:48:21 +00:00
8bfa8b7981 feat(http-fuzz): align run_baseline.py preview API with run_fuzz.py Graham Sutherland 2026-02-20 23:48:16 +00:00
fbb02cc6e2 feat(http-fuzz): full-body baseline + context-aware preview guidance Graham Sutherland 2026-02-20 22:34:03 +00:00
a7268414b5 feat(http-fuzz): --preview-length 0 returns full body untruncated Graham Sutherland 2026-02-20 22:26:27 +00:00
1dec2cfd4c http-fuzz: add body preview options, SQL injection corpus, session expiry detection Graham Sutherland 2026-02-20 22:14:51 +00:00
0618d37b33 content type fuzzing, pcaps Darius Houle 2026-02-20 14:16:26 -07:00
60ab7b0fe0 Fix second-opinion Codex schema validation and update Gemini model (#103) Dan Guido 2026-02-20 13:56:28 -07:00
d656938406 large number of iterative refinements Darius Houle 2026-02-20 09:54:11 -07:00
f27ade2879 http-fuzz: add JSON string category and unsafe deserialization guidance Graham Sutherland 2026-02-20 01:44:55 +00:00
75e11fbcca http-fuzz: replace destructive SQL examples with non-destructive equivalents Graham Sutherland 2026-02-20 01:32:01 +00:00
8cf8f4ba78 http-fuzz: fix external $ref notes and generalize OData docs Graham Sutherland 2026-02-20 01:23:47 +00:00
fe119f5e84 http-fuzz: add OpenAPI support and clean up skill language Graham Sutherland 2026-02-20 00:48:35 +00:00
4c24236e16 initial pass Darius Houle 2026-02-19 11:14:44 -07:00
2f0ae6f15c Fix workflow-skill-design plugin failing to load (#102) Francesco Bertolaccini 2026-02-19 18:13:54 +01:00
7e885f5982 Sync devcontainer-setup templates with upstream claude-code-devcontainer (#101) dm 2026-02-19 15:55:39 +01:00
c557d2a269 Bundle codex-mcp-server into second-opinion plugin (#95) Dan Guido 2026-02-18 23:49:35 -07:00
9fb1ec15de Add workflow-skill-design plugin (#100) Benjamin Samuels 2026-02-18 22:31:12 -08:00
224f51731e ci: enforce pre-commit formatting hooks in CI (#99) Dan Guido 2026-02-18 10:20:31 -07:00
9f7f8adad9 style: fix formatting issues across 27 plugin files (#98) Dan Guido 2026-02-18 10:09:58 -07:00
4c854b712e Fix culture-index SKILL.md standards compliance (#96) Dan Guido 2026-02-17 21:32:35 -07:00
776ccc812c second-opinion: switch Codex from codex review to codex exec (#93) Dan Guido 2026-02-17 03:05:33 -07:00
b9ac28c214 Add links to related Trail of Bits repos in README (#92) Dan Guido 2026-02-13 16:06:52 -05:00
dc1bc277f0 Also hook pipx (#90) William Tan 2026-02-13 14:43:27 -05:00
d3630e5193 Skip dep scan when diff doesn't touch dependency files (#91) Dan Guido 2026-02-13 14:33:36 -05:00
962f7433a1 Add spec-compliance-checker agent to spec-to-code-compliance (#82) Dan Guido 2026-02-12 23:09:08 -05:00
271c095d31 Add function-analyzer agent to audit-context-building (#83) Dan Guido 2026-02-12 23:08:06 -05:00
994fe9687b use PATH shim override technique instead of hooking every pre tool usage (#89) William Tan 2026-02-12 22:16:40 -05:00
d356b6b5bb improve gh hook to prefer cloning repo instead of using api to fetch files (#88) William Tan 2026-02-12 21:16:05 -05:00
42466c4600 Fix Gemini heredoc patterns that prevent variable expansion (#87) Dan Guido 2026-02-12 19:53:29 -05:00
9600b3d9e6 Add semgrep-scanner and semgrep-triager agents to static-analysis (#80) Dan Guido 2026-02-12 11:17:57 -05:00
f4b2a7218f better ci validations, fix marketplace error (#85) Paweł Płatek 2026-02-12 16:28:33 +01:00
15f6b1c880 Remove fix-review plugin (moved to skills-internal) (#86) Dan Guido 2026-02-12 09:31:01 -05:00
f8819350fe Add git-cleanup skill (#77) Henrik Brodin 2026-02-12 01:59:33 +01:00
dca4d846ad Add hook for gh-cli (#78) William Tan 2026-02-11 19:46:50 -05:00
57a837d18b Add failure interpretation guide to property-based-testing skill (#74) Henrik Brodin 2026-02-11 17:39:47 +01:00

1 2 3 4 5 ...