trailofbits

Systematically verifies suspected security bugs to eliminate false positives, producing a TRUE POSITIVE or FALSE POSITIVE verdict with…

Scans Android APKs for Firebase security misconfigurations including open databases, storage buckets, authentication issues, and exposed…

Builds and applies fuzzing dictionaries so a fuzzer can produce the keywords, magic bytes, and tokens a target expects.

tsx runs TypeScript + JSX files directly via Node with no config — no tsconfig.json needed.

Graph-informed mutation testing triage. Parses codebases with Trailmark, runs mutation testing and necessist, then uses survived mutants…

Enforces authenticated gh CLI workflows over unauthenticated curl, WebFetch, and MCP fetch patterns.

Safely analyzes and cleans up local git branches and worktrees by categorizing them as merged, squash-merged, superseded, or active work.

Compares Trailmark code graphs at two source code snapshots (git commits, tags, or directories) to surface security-relevant structural…

Smart contract development advisor based on Trail of Bits' best practices.

Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production.

Interprets Culture Index (CI) surveys, behavioral profiles, and personality assessment data.

Draws the 12 Houses of the Zodiac Tarot spread to inject entropy into planning when prompts are vague, ambiguous, or casually delegated.