Trail of Bits Launches Claude Code Skills Marketplace to Enhance AI-Assisted Security Research
Trail of Bits has launched a Claude Code plugin marketplace, offering a collection of "skills" designed to enhance AI-assisted security analysis, testing, and development workflows. This marketplace enables users to browse and install various plugins either through Claude Code's marketplace compatibility or directly via Codex. The available plugins span several critical areas within cybersecurity and software development. These include Smart Contract Security, featuring tools like `building-secure-contracts` for vulnerability scanning across multiple blockchains and `entry-point-analyzer` for identifying state-changing entry points in smart contracts. Code Auditing plugins are also prominent, such as `agentic-actions-auditor` for securing GitHub Actions workflows, `c-review` and `rust-review` for comprehensive security reviews in C/C++ and Rust respectively, and `static-analysis` which integrates tools like CodeQL and Semgrep. Additional categories encompass Malware Analysis with `yara-authoring` for YARA ...