trailofbits

Use when the task involves reading, creating, or editing `.docx` documents, especially when

Verifies that git commits address security audit findings without introducing bugs.

Use when a user asks to debug or fix failing GitHub PR checks that run in GitHub Actions;

Remove signs of AI-generated writing from text.

Researches a topic from the last 30 days on Reddit, X, and the web.

Configures Python projects with modern tooling (uv, ruff, ty).

Use when tasks involve reading, creating, or reviewing PDF files where rendering and layout

Use when the task requires automating a real browser from the terminal (navigation, form

Help address review/issue comments on the open GitHub PR for the current branch using gh

Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns.

Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes.

Iteratively reviews and fixes Claude Code skill quality issues until they meet standards.