使用 Trail of Bits 技能在 Claude Code 中运行安全审计和变体分析工作流
Use curated Trail of Bits security skills inside Claude Code when the job is auditing, variant hunting, or fix verification rather than generic coding assistance.
Prerequisites
Claude Code with plugin marketplace support, the Trail of Bits skills repository or marketplace install, and whatever upstream tools a selected security skill requires such as Semgrep, CodeQL, SARIF tooling, Burp exports, or language-specific analyzers.
Installation
Use the upstream install or setup path that matches your environment:
- git clone https://github.com/1991513ccie-png/skills ~/.codex/trailofbits-skills
Requirements and caveats from upstream:
- | modern-python | Modern Python tooling and best practices with uv, ruff, and pytest |
Basic usage or getting-started notes:
- ### Claude Code Marketplace
- /plugin marketplace add trailofbits/skills
- ### Browse and Install Plugins
- Source: https://github.com/1991513ccie-png/skills
- Extracted from upstream docs: https://raw.githubusercontent.com/trailofbits/skills/HEAD/README.md
Documentation
- https://github.com/1991513ccie-png/skills
