Trail of Bits launches Claude Code skills marketplace for security work
Security firm Trail of Bits published the open-source trailofbits/skills repository, a Claude Code plugin marketplace offering skills for security research, vulnerability detection and audit workflows. The plugins span smart contract security, code auditing, malware analysis, formal verification, reverse engineering, mobile security and development tooling, with examples such as Semgrep rule authoring, CodeQL static analysis, YARA rule writing, property-based testing and zeroization audits. The repo says Codex can load Claude plugin marketplaces directly and that ChatGPT workspace imports use its marketplace.json; it is licensed CC BY-SA 4.0 and lists reported bugs found with the skills, though it provides no adoption or usage figures.
It packages an established security team's audit workflows into reusable skills, making it easier to wire standard tooling into AI coding agents for code review and vulnerability detection.