Automation skills

This skill verifies code matches documentation and identifies gaps between spec and implementation in blockchain audits.

This skill helps you fuzz Rust projects quickly with cargo-fuzz, enabling libFuzzer-backed testing and sanitizer integration for robust code.

This skill helps you craft production-quality Semgrep rules with tests, taint mode, and validation to detect vulnerabilities and enforce standards.

This skill analyzes code maturity using Trail of Bits framework to produce evidence-based ratings and actionable improvement recommendations.

This skill analyzes smart contract codebases using Trail of Bits guidelines to generate docs, assess architecture, upgradeability, testing, and provide

This skill iteratively reviews and fixes Claude Code skills using the skill-reviewer agent to meet quality standards and improve descriptions.

This skill helps resolve vague prompts by drawing and interpreting a 4-card Tarot spread to guide next steps.

This skill generates minimal macOS Seatbelt sandbox configurations to isolate applications with allowlist-based profiles for secure, confined execution.

This skill guides designing workflow-based Claude Code skills with multi-step phases, decision trees, and progressive disclosure to ensure robust routing and

This skill analyzes local git branches and worktrees, groups related work, and guides safe cleanup with user approval.

This skill helps you interact with GitHub resources using the gh CLI, replacing curl or WebFetch for repos, PRs, issues, and API data.

This skill provides an independent code review by integrating Codex and Gemini CLIs for uncommitted changes, diffs, or specific commits.

This skill runs CodeQL analysis to detect security vulnerabilities across languages using interprocedural taint tracking and data flow insights.

This skill prepares codebases for security reviews by guiding goals, running static analysis, boosting test coverage, removing dead code, and generating

This skill helps you validate crypto implementations against known attacks using Wycheproof test vectors across AES-GCM, ECDSA, RSA, and more.

This skill helps you bypass anti-fuzzing obstacles by patching code for fuzzing builds while preserving production behavior.

This skill guides security analysis using Trail of Bits' 5-step workflow, runs Slither checks, generates diagrams, and documents security properties.

This skill helps you craft targeted fuzzing dictionaries to improve parser and protocol coverage by injecting domain-specific tokens.

This skill helps you quickly fuzz Python code and C extensions using Atheris to uncover memory issues with libFuzzer integration.

This skill helps identify timing side-channel leaks in cryptographic code by guiding statistical, dynamic, and formal analyses.

This skill scans Algorand smart contracts for 11 vulnerabilities, delivering actionable findings and fixes to strengthen TEAL and PyTeal security.