trailofbits

Runs external LLM code reviews (OpenAI Codex or Google Antigravity CLI) on uncommitted changes, branch diffs, or specific commits.

Guides through Trail of Bits' 5-step secure development workflow.

Semgrep is a fast static analysis tool for finding bugs and enforcing code standards.

Creates language variants of existing Semgrep rules.

Runs a Semgrep security scan over a codebase: detects languages, selects rulesets, presents the plan for explicit approval, then runs…

Use when the user asks to inspect Sentry issues or events, summarize recent production errors,

Extracts reusable skills from work sessions.

Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ownership checks…

Check code against the documentation that specifies it - which requirements hold, which the code contradicts, which are absent, and what…

Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic DoS, incorrect weights, and bad…

Generates Claude Code skills from the Trail of Bits Testing Handbook (appsec.guide), analyzing handbook pages and emitting SKILL.md files…

Token integration and implementation analyzer based on Trail of Bits' token integration checklist.