Trail of Bits Skills

Specialized prompts for security workflows

Trail of Bits describes this repository as a marketplace of agent plugins and skills for security analysis, testing, and development. The examples include code-audit and smart-contract security workflows, alongside supporting components (repository and installation guidance). That makes it more specific than a general coding-assistant prompt pack.

The intended user matters. An experienced auditor can use the instructions to scope a task, inspect code paths, or organize analysis. A newcomer should not treat generated output as proof that a system is secure or that a reported issue is exploitable. Findings need reproduction and review against the actual code and threat model.

Check what you are installing

The repository bundles more than standalone Markdown skills: plugins and tools may have different setup requirements. Read the instructions for the selected component and understand what it runs before enabling it in a sensitive repository. This is especially important when source code or secrets are exposed to an agent or an external model provider.

Trail of Bits’ repository license is CC BY-SA 4.0, with attribution and share-alike obligations (license). Teams planning to redistribute modified materials should review those terms. Choose this collection when a security workflow is the goal and a qualified person can verify the work; skip it as a substitute for a professional audit.