Claude Code plugin

Trail of Bits Skills

Trail of Bits plugin marketplace for security research and audit workflows.

7,979 stars 680 forksPlugins & marketplaces Plugin marketplace Source

Install

Inside Claude Code
/plugin marketplace add trailofbits/skills
From source
git clone https://github.com/trailofbits/skills.git

From the README

Trail of Bits Skills Marketplace

Trail of Bits skills and plugins for AI-assisted security analysis, testing, and development. Install this marketplace in Claude Code or Codex, or import it into your ChatGPT workspace marketplace.
Also see: claude-code-config · codex-config · skills-curated · trailmark · calcifier · coop

Installation

Claude Code Marketplace

Browse and Install Plugins

Codex

Codex supports Claude plugin marketplaces directly, so this repository does not need Codex-specific sidecar metadata.

Install the marketplace with:

ChatGPT Workspace Marketplace

Use this repository's .claude-plugin/marketplace.json for workspace imports.
Skills that include agents/openai.yaml also need interface.display_name and
interface.short_description in that YAML file; plugin metadata does not supply them.
After a metadata fix is published, sync the repository again in your workspace
marketplace to retry failed imports.

Local Development

To add the marketplace locally (e.g., for testing or development), navigate to the parent directory of this repository:

Available Plugins

Smart Contract Security

Code Auditing

Malware Analysis

Verification

Reverse Engineering

Mobile Security

Development

Team Management

Tooling

Trophy Case

Bugs discovered using Trail of Bits Skills. Found something? Let us know!

When reporting bugs you've found, feel free to mention:
Found using Trail of Bits Skills

Contributing

We welcome contributions! See AGENTS.md for skill authoring guidelines, and
run make check before you push — it runs most of CI locally (see AGENTS.md for
what it does not cover).

Codex provides advisory fast reviews for eligible PRs from this repository. Maintainers
with write access can request another fast review by commenting @codex review, or a
deeper…
Read the full README on GitHub

How plugins work

  • A plugin bundles slash commands, subagents, skills, hooks, MCP servers and status lines so they install together.
  • Add the marketplace inside Claude Code with /plugin marketplace add trailofbits/skills, then run /plugin to pick what to install.
  • You can turn a plugin off again from /plugin without deleting anything.
Claude Code docs

Details

Language
Python
License
CC-BY-SA-4.0
Last updated
2 November 2026
Topics
agent-skills

FAQ

What is Trail of Bits Skills?

Trail of Bits plugin marketplace for security research and audit workflows. It is a plugin for Claude Code, from trailofbits/skills on GitHub.

How do I install Trail of Bits Skills?

Run /plugin marketplace add trailofbits/skills inside Claude Code, then follow the setup in the README.

Is Trail of Bits Skills popular?

trailofbits/skills has 7,979 GitHub stars and 680 forks, and is included in 1 curated Claude Code list. It was last updated on 2 November 2026.

More plugins & marketplaces

Claude Obsidian

16k

AgriciDaniel/claude-obsidian

Self-organizing AI second brain for Obsidian + Claude Code. Drop any source and Claude reads, links, and files it into one connected knowledge graph of plain Markdown you own. AI note-taking, personal knowledge management (PKM), and an open-source Notion alternative. Based on Karpathy's LLM Wiki pattern.

Plugins & marketplaces/plugin install1.6k

Claude Skills

12k

Jeffallan/claude-skills

67 Specialized Skills for Full-Stack Developers. Transform Claude Code into your expert pair programmer.

Plugins & marketplaces/plugin install1.2k

Claude Plugins Community

4.8k

anthropics/claude-plugins-community

Read-only mirror of the community plugin marketplace for Claude Code and Cowork.

Plugins & marketplaces/plugin install351

Open Saas

16k

wasp-lang/open-saas

A 100% free modern JS SaaS boilerplate (React, NodeJS, Prisma). Full-featured: Auth (email, google, github, slack, MS), Email sending, Background jobs, Landing page, Payments (Stripe, Polar.sh), Shadcn UI, S3 file upload. AI-ready with tailored AGENTS.md, skills, and Claude Code plugin. One cmd deploy. Powered by Wasp full-stack framework.

Plugins & marketplaces2k

Pm Skills

28k

phuryn/pm-skills

PM Skills Marketplace: 100+ agentic skills, commands, and plugins — from discovery to strategy, execution, launch, and growth.

Plugins & marketplaces/plugin install2.9k

Elephant Goldfish Model

11k

google/elephant-goldfish-model

Open-source skills for designing and reviewing software with AI agents

Plugins & marketplaces/plugin install755

Browse the most popular Claude Code mods, all plugins & marketplaces, or the skills and MCP server directories.