[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"org-trail-of-bits":3,"repo-skills-v-0-3-0":131},{"org":4,"repos":58},{"slug":5,"name":6,"logoUrl":7,"githubOrg":8,"website":9,"skillCount":10,"repoCount":11,"topRepos":12,"topTags":26,"lastUpdatedAt":57},"trail-of-bits","Trail of Bits","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Ftrail-of-bits.png","trailofbits","https:\u002F\u002Fwww.trailofbits.com",111,5,[13,16,19,22,24],{"name":14,"skillCount":15},"trailofbits\u002Fskills",77,{"name":17,"skillCount":18},"trailofbits\u002Fskills-curated",31,{"name":20,"skillCount":21},"trailofbits\u002Fidac",1,{"name":23,"skillCount":21},"trailofbits\u002Fmewt",{"name":25,"skillCount":21},"trailofbits\u002Fnecessist",[27,30,33,36,39,42,45,48,51,54],{"slug":28,"name":29},"security","Security",{"slug":31,"name":32},"code-analysis","Code Analysis",{"slug":34,"name":35},"audit","Audit",{"slug":37,"name":38},"testing","Testing",{"slug":40,"name":41},"engineering","Engineering",{"slug":43,"name":44},"debugging","Debugging",{"slug":46,"name":47},"smart-contracts","Smart Contracts",{"slug":49,"name":50},"code-review","Code Review",{"slug":52,"name":53},"cryptography","Cryptography",{"slug":55,"name":56},"documentation","Documentation","2026-08-01T06:06:34.719192",[59,75,95,107,118],{"name":60,"fullName":14,"repoUrl":61,"skillCount":15,"stars":62,"forks":63,"description":64,"topics":65,"topTags":67,"topTagCount":74,"lastUpdatedAt":57},"skills","https:\u002F\u002Fgithub.com\u002Ftrailofbits\u002Fskills",6139,541,"Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows",[66],"agent-skills",[68,69,70,71,72,73],{"slug":28,"name":29},{"slug":31,"name":32},{"slug":34,"name":35},{"slug":37,"name":38},{"slug":40,"name":41},{"slug":46,"name":47},50,{"name":76,"fullName":17,"repoUrl":77,"skillCount":18,"stars":78,"forks":79,"description":80,"topics":81,"topTags":82,"topTagCount":93,"lastUpdatedAt":94},"skills-curated","https:\u002F\u002Fgithub.com\u002Ftrailofbits\u002Fskills-curated",460,29,"Curated, community-vetted Claude Code plugin marketplace",[],[83,84,85,86,89,92],{"slug":28,"name":29},{"slug":31,"name":32},{"slug":43,"name":44},{"slug":87,"name":88},"best-practices","Best Practices",{"slug":90,"name":91},"cli","CLI",{"slug":49,"name":50},73,"2026-07-18T05:48:21.798808",{"name":96,"fullName":20,"repoUrl":97,"skillCount":21,"stars":98,"forks":99,"description":100,"topics":101,"topTags":102,"topTagCount":99,"lastUpdatedAt":106},"idac","https:\u002F\u002Fgithub.com\u002Ftrailofbits\u002Fidac",39,3,"idac - IDA Pro command line tool for agents and humans",[],[103,104,105],{"slug":31,"name":32},{"slug":43,"name":44},{"slug":40,"name":41},"2026-07-29T05:39:49.791057",{"name":108,"fullName":23,"repoUrl":109,"skillCount":21,"stars":74,"forks":110,"description":111,"topics":112,"topTags":113,"topTagCount":99,"lastUpdatedAt":117},"mewt","https:\u002F\u002Fgithub.com\u002Ftrailofbits\u002Fmewt",2,"mewt is a mutation testing framework",[],[114,115,116],{"slug":31,"name":32},{"slug":40,"name":41},{"slug":37,"name":38},"2026-07-17T06:06:23.426569",{"name":119,"fullName":25,"repoUrl":120,"skillCount":21,"stars":121,"forks":122,"description":123,"topics":124,"topTags":126,"topTagCount":99,"lastUpdatedAt":130},"necessist","https:\u002F\u002Fgithub.com\u002Ftrailofbits\u002Fnecessist",144,19,"A mutation-based tool for finding bugs in tests",[125,37],"mutation",[127,128,129],{"slug":31,"name":32},{"slug":43,"name":44},{"slug":37,"name":38},"2026-07-29T06:00:32.303573",{"items":132,"total":18},[133,144,154,173,189,205,219,238,258,277,291,307,326,341,355,368,387,397,412,427,444,461,474,489],{"slug":134,"name":134,"fn":135,"description":136,"org":137,"tags":138,"stars":78,"repoUrl":77,"updatedAt":143},"ffuf-web-fuzzing","perform web fuzzing with ffuf","Expert guidance for ffuf web fuzzing during authorized penetration testing. Covers directory discovery, subdomain enumeration, parameter fuzzing, authenticated fuzzing with raw requests, auto-calibration, and result analysis. Use when running ffuf scans, analyzing ffuf output, or building fuzzing strategies for web targets.",{"slug":5,"name":6,"logoUrl":7,"githubOrg":8},[139,141,142],{"name":32,"slug":31,"type":140},"tag",{"name":29,"slug":28,"type":140},{"name":38,"slug":37,"type":140},"2026-07-17T06:05:08.247908",{"slug":145,"name":145,"fn":146,"description":147,"org":148,"tags":149,"stars":78,"repoUrl":77,"updatedAt":153},"ghidra-headless","reverse engineer binaries with Ghidra","Reverse engineers binaries using Ghidra's headless analyzer. Use when decompiling executables, extracting functions, strings, symbols, or analyzing call graphs from compiled binaries without the Ghidra GUI.",{"slug":5,"name":6,"logoUrl":7,"githubOrg":8},[150,151,152],{"name":32,"slug":31,"type":140},{"name":44,"slug":43,"type":140},{"name":29,"slug":28,"type":140},"2026-07-18T05:47:30.015093",{"slug":155,"name":155,"fn":156,"description":157,"org":158,"tags":159,"stars":78,"repoUrl":77,"updatedAt":172},"grilling","stress-test plans and decisions","Interviews the user relentlessly about a plan, decision, or idea until every branch of the decision tree is resolved. Use when the user wants to stress-test their thinking, sharpen a plan or design before acting, or uses any 'grill' trigger phrase (e.g. \"grill me on this\").",{"slug":5,"name":6,"logoUrl":7,"githubOrg":8},[160,163,166,169],{"name":161,"slug":162,"type":140},"Analysis","analysis",{"name":164,"slug":165,"type":140},"Coaching","coaching",{"name":167,"slug":168,"type":140},"Ideation","ideation",{"name":170,"slug":171,"type":140},"Strategy","strategy","2026-07-18T05:48:12.46583",{"slug":174,"name":174,"fn":175,"description":176,"org":177,"tags":178,"stars":78,"repoUrl":77,"updatedAt":188},"handoff","compact conversation for session handoff","Compacts the current conversation into a handoff document so a fresh agent can continue the work in a new session.",{"slug":5,"name":6,"logoUrl":7,"githubOrg":8},[179,182,185],{"name":180,"slug":181,"type":140},"Agents","agents",{"name":183,"slug":184,"type":140},"Context","context",{"name":186,"slug":187,"type":140},"Productivity","productivity","2026-07-18T05:47:03.196098",{"slug":190,"name":190,"fn":191,"description":192,"org":193,"tags":194,"stars":78,"repoUrl":77,"updatedAt":204},"humanizer","edit text to sound human-written","Remove signs of AI-generated writing from text. Use when editing or reviewing\ntext to make it sound more natural and human-written. Based on Wikipedia's\ncomprehensive \"Signs of AI writing\" guide. Detects and fixes patterns including:\ninflated symbolism, promotional language, superficial -ing analyses, vague\nattributions, em dash overuse, rule of three, AI vocabulary words, negative\nparallelisms, and excessive conjunctive phrases. 30c5c8d (Update humanizer plugin to upstream v2.2.0)\n",{"slug":5,"name":6,"logoUrl":7,"githubOrg":8},[195,198,201],{"name":196,"slug":197,"type":140},"Content Creation","content-creation",{"name":199,"slug":200,"type":140},"Editing","editing",{"name":202,"slug":203,"type":140},"Writing","writing","2026-07-18T05:47:18.1749",{"slug":206,"name":206,"fn":207,"description":208,"org":209,"tags":210,"stars":78,"repoUrl":77,"updatedAt":218},"last30days","research recent community discussions and trends","Researches a topic from the last 30 days on Reddit, X, and the web. Surfaces real community discussions with engagement metrics and synthesizes findings into actionable insights. Use when the user wants to know what people are saying about a topic right now.",{"slug":5,"name":6,"logoUrl":7,"githubOrg":8},[211,212,215],{"name":161,"slug":162,"type":140},{"name":213,"slug":214,"type":140},"Research","research",{"name":216,"slug":217,"type":140},"Social Media","social-media","2026-07-17T06:04:39.744471",{"slug":220,"name":220,"fn":221,"description":222,"org":223,"tags":224,"stars":78,"repoUrl":77,"updatedAt":237},"openai-cloudflare-deploy","deploy applications to Cloudflare","Deploy applications and infrastructure to Cloudflare using Workers, Pages, and related platform services. Use when the user asks to deploy, host, publish, or set up a project on Cloudflare. Originally from OpenAI's curated skills catalog.",{"slug":5,"name":6,"logoUrl":7,"githubOrg":8},[225,228,231,234],{"name":226,"slug":227,"type":140},"Cloudflare","cloudflare",{"name":229,"slug":230,"type":140},"Cloudflare Pages","cloudflare-pages",{"name":232,"slug":233,"type":140},"Cloudflare Workers","cloudflare-workers",{"name":235,"slug":236,"type":140},"Deployment","deployment","2026-07-17T06:04:46.574433",{"slug":239,"name":239,"fn":240,"description":241,"org":242,"tags":243,"stars":78,"repoUrl":77,"updatedAt":257},"openai-develop-web-game","build and test web games","Use when the agent is building or iterating on a web game (HTML\u002FJS) and needs a reliable development + testing loop: implement small changes, run a Playwright-based test script with short input bursts and intentional pauses, inspect screenshots\u002Ftext, and review console errors with render_game_to_text. Originally from OpenAI's curated skills catalog.",{"slug":5,"name":6,"logoUrl":7,"githubOrg":8},[244,247,250,253,256],{"name":245,"slug":246,"type":140},"Game Development","game-development",{"name":248,"slug":249,"type":140},"HTML","html",{"name":251,"slug":252,"type":140},"JavaScript","javascript",{"name":254,"slug":255,"type":140},"Playwright","playwright",{"name":38,"slug":37,"type":140},"2026-07-17T06:06:56.627075",{"slug":259,"name":259,"fn":260,"description":261,"org":262,"tags":263,"stars":78,"repoUrl":77,"updatedAt":276},"openai-doc","create and edit Word documents","Use when the task involves reading, creating, or editing `.docx` documents, especially when formatting or layout fidelity matters; prefer `python-docx` plus the bundled `scripts\u002Frender_docx.py` for visual checks. Originally from OpenAI's curated skills catalog.",{"slug":5,"name":6,"logoUrl":7,"githubOrg":8},[264,267,270,273],{"name":265,"slug":266,"type":140},"Documents","documents",{"name":268,"slug":269,"type":140},"DOCX","docx",{"name":271,"slug":272,"type":140},"Office","office",{"name":274,"slug":275,"type":140},"Word","word","2026-07-18T05:47:15.066614",{"slug":278,"name":278,"fn":279,"description":280,"org":281,"tags":282,"stars":78,"repoUrl":77,"updatedAt":94},"openai-gh-address-comments","address GitHub pull request review comments","Help address review\u002Fissue comments on the open GitHub PR for the current branch using gh CLI; verify gh auth first and prompt the user to authenticate if not logged in. Originally from OpenAI's curated skills catalog.",{"slug":5,"name":6,"logoUrl":7,"githubOrg":8},[283,284,285,288],{"name":91,"slug":90,"type":140},{"name":50,"slug":49,"type":140},{"name":286,"slug":287,"type":140},"GitHub","github",{"name":289,"slug":290,"type":140},"Pull Requests","pull-requests",{"slug":292,"name":292,"fn":293,"description":294,"org":295,"tags":296,"stars":78,"repoUrl":77,"updatedAt":306},"openai-gh-fix-ci","debug and fix failing GitHub PR checks","Use when a user asks to debug or fix failing GitHub PR checks that run in GitHub Actions; use `gh` to inspect checks and logs, summarize failure context, draft a fix plan, and implement only after explicit approval. Treat external providers (for example Buildkite) as out of scope and report only the details URL. Originally from OpenAI's curated skills catalog.",{"slug":5,"name":6,"logoUrl":7,"githubOrg":8},[297,300,301,302,303],{"name":298,"slug":299,"type":140},"CI\u002FCD","ci-cd",{"name":50,"slug":49,"type":140},{"name":44,"slug":43,"type":140},{"name":286,"slug":287,"type":140},{"name":304,"slug":305,"type":140},"GitHub Actions","github-actions","2026-07-17T06:05:01.752885",{"slug":308,"name":308,"fn":309,"description":310,"org":311,"tags":312,"stars":78,"repoUrl":77,"updatedAt":325},"openai-jupyter-notebook","create and edit Jupyter notebooks","Use when the user asks to create, scaffold, or edit Jupyter notebooks (`.ipynb`) for experiments, explorations, or tutorials; prefer the bundled templates and run the helper script `new_notebook.py` to generate a clean starting notebook. Originally from OpenAI's curated skills catalog.",{"slug":5,"name":6,"logoUrl":7,"githubOrg":8},[313,316,319,322],{"name":314,"slug":315,"type":140},"Data Analysis","data-analysis",{"name":317,"slug":318,"type":140},"Experiments","experiments",{"name":320,"slug":321,"type":140},"Jupyter","jupyter",{"name":323,"slug":324,"type":140},"Notebooks","notebooks","2026-07-18T05:48:17.52064",{"slug":327,"name":327,"fn":328,"description":329,"org":330,"tags":331,"stars":78,"repoUrl":77,"updatedAt":340},"openai-netlify-deploy","deploy web projects to Netlify","Deploy web projects to Netlify using the Netlify CLI (`npx netlify`). Use when the user asks to deploy, host, publish, or link a site\u002Frepo on Netlify, including preview and production deploys. Originally from OpenAI's curated skills catalog.",{"slug":5,"name":6,"logoUrl":7,"githubOrg":8},[332,333,334,337],{"name":91,"slug":90,"type":140},{"name":235,"slug":236,"type":140},{"name":335,"slug":336,"type":140},"Netlify","netlify",{"name":338,"slug":339,"type":140},"Web Development","web-development","2026-07-18T05:47:26.473964",{"slug":342,"name":342,"fn":343,"description":344,"org":345,"tags":346,"stars":78,"repoUrl":77,"updatedAt":354},"openai-pdf","read and process PDF documents","Use when tasks involve reading, creating, or reviewing PDF files where rendering and layout matter; prefer visual checks by rendering pages (Poppler) and use Python tools such as `reportlab`, `pdfplumber`, and `pypdf` for generation and extraction. Originally from OpenAI's curated skills catalog.",{"slug":5,"name":6,"logoUrl":7,"githubOrg":8},[347,350,351],{"name":348,"slug":349,"type":140},"Data Extraction","data-extraction",{"name":265,"slug":266,"type":140},{"name":352,"slug":353,"type":140},"PDF","pdf","2026-07-18T05:48:15.663086",{"slug":356,"name":356,"fn":357,"description":358,"org":359,"tags":360,"stars":78,"repoUrl":77,"updatedAt":367},"openai-playwright","automate browser tasks with Playwright","Use when the task requires automating a real browser from the terminal (navigation, form filling, snapshots, screenshots, data extraction, UI-flow debugging) via `playwright-cli` or the bundled wrapper script. Originally from OpenAI's curated skills catalog.",{"slug":5,"name":6,"logoUrl":7,"githubOrg":8},[361,364,365,366],{"name":362,"slug":363,"type":140},"Browser Automation","browser-automation",{"name":254,"slug":255,"type":140},{"name":38,"slug":37,"type":140},{"name":338,"slug":339,"type":140},"2026-07-18T05:47:15.52426",{"slug":369,"name":369,"fn":370,"description":371,"org":372,"tags":373,"stars":78,"repoUrl":77,"updatedAt":386},"openai-screenshot","capture desktop and system screenshots","Use when the user explicitly asks for a desktop or system screenshot (full screen, specific app or window, or a pixel region), or when tool-specific capture capabilities are unavailable and an OS-level capture is needed. Originally from OpenAI's curated skills catalog.",{"slug":5,"name":6,"logoUrl":7,"githubOrg":8},[374,377,380,383],{"name":375,"slug":376,"type":140},"Desktop","desktop",{"name":378,"slug":379,"type":140},"macOS","macos",{"name":381,"slug":382,"type":140},"Screenshots","screenshots",{"name":384,"slug":385,"type":140},"Windows","windows","2026-07-18T05:47:17.71327",{"slug":388,"name":388,"fn":389,"description":390,"org":391,"tags":392,"stars":78,"repoUrl":77,"updatedAt":396},"openai-security-best-practices","perform security best-practice code reviews","Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review\u002Freport, or secure-by-default coding help. Trigger only for supported languages (python, javascript\u002Ftypescript, go). Do not trigger for general code review, debugging, or non-security tasks. Originally from OpenAI's curated skills catalog.",{"slug":5,"name":6,"logoUrl":7,"githubOrg":8},[393,394,395],{"name":88,"slug":87,"type":140},{"name":50,"slug":49,"type":140},{"name":29,"slug":28,"type":140},"2026-07-17T06:06:50.407352",{"slug":398,"name":398,"fn":399,"description":400,"org":401,"tags":402,"stars":78,"repoUrl":77,"updatedAt":411},"openai-security-ownership-map","map security ownership in git repositories","Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV\u002FJSON for graph databases and visualization. Trigger only when the user explicitly wants a security-oriented ownership or bus-factor analysis grounded in git history (for example: orphaned sensitive code, security maintainers, CODEOWNERS reality checks for risk, sensitive hotspots, or ownership clusters). Do not trigger for general maintainer lists or non-security ownership questions. Originally from OpenAI's curated skills catalog.",{"slug":5,"name":6,"logoUrl":7,"githubOrg":8},[403,404,407,410],{"name":32,"slug":31,"type":140},{"name":405,"slug":406,"type":140},"Data Visualization","data-visualization",{"name":408,"slug":409,"type":140},"Git","git",{"name":29,"slug":28,"type":140},"2026-07-18T05:47:22.847671",{"slug":413,"name":413,"fn":414,"description":415,"org":416,"tags":417,"stars":78,"repoUrl":77,"updatedAt":426},"openai-security-threat-model","generate repository threat models","Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats\u002Fabuse paths, or perform AppSec threat modeling. Do not trigger for general architecture summaries, code review, or non-security design work. Originally from OpenAI's curated skills catalog.",{"slug":5,"name":6,"logoUrl":7,"githubOrg":8},[418,419,422,423],{"name":32,"slug":31,"type":140},{"name":420,"slug":421,"type":140},"Markdown","markdown",{"name":29,"slug":28,"type":140},{"name":424,"slug":425,"type":140},"Threat Modeling","threat-modeling","2026-07-17T06:05:10.58741",{"slug":428,"name":428,"fn":429,"description":430,"org":431,"tags":432,"stars":78,"repoUrl":77,"updatedAt":443},"openai-sentry","inspect and summarize Sentry production errors","Use when the user asks to inspect Sentry issues or events, summarize recent production errors, or pull basic Sentry health data via the Sentry API; perform read-only queries with the bundled script and require `SENTRY_AUTH_TOKEN`. Originally from OpenAI's curated skills catalog.",{"slug":5,"name":6,"logoUrl":7,"githubOrg":8},[433,434,437,440],{"name":44,"slug":43,"type":140},{"name":435,"slug":436,"type":140},"Monitoring","monitoring",{"name":438,"slug":439,"type":140},"Observability","observability",{"name":441,"slug":442,"type":140},"Sentry","sentry","2026-07-17T06:06:54.525993",{"slug":445,"name":445,"fn":446,"description":447,"org":448,"tags":449,"stars":78,"repoUrl":77,"updatedAt":460},"openai-spreadsheet","create and analyze spreadsheets","Use when tasks involve creating, editing, analyzing, or formatting spreadsheets (`.xlsx`, `.csv`, `.tsv`) using Python (`openpyxl`, `pandas`), especially when formulas, references, and formatting need to be preserved and verified. Originally from OpenAI's curated skills catalog.",{"slug":5,"name":6,"logoUrl":7,"githubOrg":8},[450,451,454,457],{"name":314,"slug":315,"type":140},{"name":452,"slug":453,"type":140},"Excel","excel",{"name":455,"slug":456,"type":140},"Python","python",{"name":458,"slug":459,"type":140},"Spreadsheets","spreadsheets","2026-07-17T06:04:44.274185",{"slug":462,"name":462,"fn":463,"description":464,"org":465,"tags":466,"stars":78,"repoUrl":77,"updatedAt":473},"openai-yeet","automate GitHub pull request workflows","Use only when the user explicitly asks to stage, commit, push, and open a GitHub pull request in one flow using the GitHub CLI (`gh`). Originally from OpenAI's curated skills catalog.",{"slug":5,"name":6,"logoUrl":7,"githubOrg":8},[467,470,471,472],{"name":468,"slug":469,"type":140},"Automation","automation",{"name":91,"slug":90,"type":140},{"name":286,"slug":287,"type":140},{"name":289,"slug":290,"type":140},"2026-07-17T06:06:47.269033",{"slug":475,"name":475,"fn":476,"description":477,"org":478,"tags":479,"stars":78,"repoUrl":77,"updatedAt":488},"planning-with-files","implement file-based planning for complex tasks","Implements file-based planning for complex multi-step tasks. Creates task_plan.md, findings.md, and progress.md as persistent working memory. Use when starting tasks requiring >5 tool calls, multi-phase projects, research, or any work where losing track of goals and progress would be costly.",{"slug":5,"name":6,"logoUrl":7,"githubOrg":8},[480,481,484,485],{"name":41,"slug":40,"type":140},{"name":482,"slug":483,"type":140},"Planning","planning",{"name":186,"slug":187,"type":140},{"name":486,"slug":487,"type":140},"Task Management","task-management","2026-07-17T06:06:49.703021",{"slug":490,"name":490,"fn":491,"description":492,"org":493,"tags":494,"stars":78,"repoUrl":77,"updatedAt":503},"react-pdf","generate PDF documents with React","Generates PDF documents using the React-PDF library (@react-pdf\u002Frenderer) with TypeScript and JSX. Use when creating PDFs, generating reports, invoices, forms, resumes, or any document that needs flexbox layout, SVG graphics, custom fonts, or professional typesetting. Prefer over Python PDF libraries (ReportLab, fpdf2) when layout complexity matters.",{"slug":5,"name":6,"logoUrl":7,"githubOrg":8},[495,496,497,500],{"name":265,"slug":266,"type":140},{"name":352,"slug":353,"type":140},{"name":498,"slug":499,"type":140},"React","react",{"name":501,"slug":502,"type":140},"TypeScript","typescript","2026-07-18T05:48:08.633935"]