The whole ecosystem, one catalog.

7,188 results · page 6 of 240

  • 2 Source AnalyzersubagentDev tools

    Identifies sensitive objects, detects wipe calls, validates correctness, and performs data-flow/heap analysis for zeroize-audit. Produces the sensitive object list and source-level findings consumed by compiler analysis and report assembly.

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • 2b Rust Source AnalyzersubagentDev tools

    Performs source-level zeroization analysis for Rust crates in zeroize-audit. Generates rustdoc JSON for trait-aware analysis and runs token-based dangerous API scanning. Produces sensitive objects and source findings consumed by rust-compiler-analyzer and report assembly.

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • 3 Tu Compiler AnalyzersubagentDev tools

    Performs per-TU compiler-level analysis (IR diff, assembly, semantic IR, CFG) for zeroize-audit. One instance runs per translation unit, enabling parallel execution across TUs.

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • 3b Rust Compiler AnalyzersubagentDev tools

    Performs crate-level MIR and LLVM IR analysis for Rust in zeroize-audit. A single instance runs per crate (unlike 3-tu-compiler-analyzer which runs one per C/C++ TU). Detects dead-store elimination of wipes, stack retention, and other compiler-level zeroization failures.

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • 5 Poc GeneratorsubagentDev tools

    Crafts bespoke proof-of-concept programs demonstrating that zeroize-audit findings are exploitable. Reads source code and finding details to generate tailored PoCs — each PoC is individually written, not templated. Each PoC exits 0 if the secret persists or 1 if wiped. Mandatory for every finding.

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • 6 Test GeneratorsubagentDev tools

    Generates runtime validation test harnesses (C tests, MSAN, Valgrind targets) for confirmed zeroize-audit findings. Produces a Makefile for automated test execution.

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • Ask Questions If UnderspecifiedpluginDev tools

    Clarify ambiguous requirements by asking questions before implementing. Only when invoked explicitly.

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • C Review Fp JudgesubagentDev tools

    Second-stage judge in the c-review pipeline. Runs after dedup-judge on merged primaries only. Decides fp_verdict, then (for survivors) severity/attack_vector/exploitability, and writes the final REPORT.md + REPORT.sarif. Spawned by the c-review skill orchestrator only.

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • Culture IndexpluginDev tools

    Interprets Culture Index survey results for individuals and teams

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • Dimension AnnotatorsubagentDev tools

    Adds dimensional annotations to source code at anchor points using Reserve Protocol's format

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • Dimension DiscoverersubagentDev tools

    Discovers dimensional vocabulary for codebases by analyzing naming conventions and protocol patterns

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • Dimension PropagatorsubagentDev tools

    Propagates dimensional annotations through arithmetic and call chains, reporting mismatches found during propagation

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • Dimension ValidatorsubagentDev tools

    Validates dimensional consistency and detects dimensional bugs in annotated code

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • Dwarf ExpertpluginDev tools

    Interact with and understand the DWARF debugging format

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • Git CleanuppluginDev tools

    Safely analyzes and cleans up local git branches and worktrees by categorizing them as merged, squash-merged, superseded, or active work.

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • Modern PythonpluginDev tools

    Modern Python best practices. Use when creating new Python projects, and writing Python scripts, or migrating existing projects from legacy tools.

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • Mutation TestingpluginDev tools

    Configures mewt or muton mutation testing campaigns — scopes targets, tunes timeouts, and optimizes long-running runs. Use when the user mentions mewt, muton, mutation testing, or wants to configure or optimize a mutation testing campaign.

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • Property Based TestingpluginDev tools

    Property-based testing guidance for multiple languages and smart contracts

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • Rust Review Fp JudgesubagentDev tools

    Second-stage judge in the rust-review pipeline. Runs after dedup-judge on merged primaries only. Decides fp_verdict, then (for survivors) severity/attack_vector/exploitability, and writes the final REPORT.md + REPORT.sarif. Spawned by the rust-review skill orchestrator only.

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • Seatbelt SandboxerpluginDev tools

    Generate minimal macOS Seatbelt sandbox configurations for applications

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • Semgrep Rule Variant CreatorpluginDev tools

    Creates language variants of existing Semgrep rules with proper applicability analysis and test-driven validation

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • Spec Compliance CheckersubagentDev tools

    Performs full specification-to-code compliance analysis for blockchain audits. Use when verifying that smart contract implementations correctly match their formal specifications or whitepapers.

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • Spec To Code CompliancepluginDev tools

    Specification-to-code compliance checker for blockchain audits with evidence-based alignment analysis

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • trailofbits:entry-pointscommandDev tools

    Identifies state-changing entry points in smart contracts

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • trailofbits:semgrep-rulecommandDev tools

    Creates Semgrep rules with test-first methodology

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • trailofbits:spec-compliancecommandDev tools

    Verifies code implements specification requirements

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • Yara AuthoringpluginDev tools

    YARA-X detection rule authoring with linting and quality analysis

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • Zeroize AuditpluginDev tools

    Detects missing or compiler-optimized zeroization of sensitive data with assembly and control-flow analysis

    github.com/trailofbits/skills6k stars

    Add to your gateway
  • acquisition-channel-advisorskillDev tools

    Evaluate acquisition channels using unit economics, customer quality, and scalability. Use when deciding whether to scale, test, or kill a growth channel.

    github.com/deanpeters/product-manager-skills6k stars

    Add to your gateway
  • DiscovercommandDev tools

    Run a structured discovery flow from problem framing through opportunity mapping and validation planning.

    github.com/deanpeters/product-manager-skills6k stars

    Add to your gateway