trailofbits/skills is a repository published by Trail of Bits that collects skills for strengthening AI-assisted security analysis, testing, and development workflows in the form of a Claude Code plugin marketplace. There are no public releases, so it is not a repository where new versions are distributed; rather, it is a repository that references a list of skills covering security research, vulnerability detection, and auditing workflows.
The plugins cover smart contract security, code auditing, malware analysis, verification, reverse engineering, mobile security, and development. Static analysis is a method of scanning code without executing it to find potential problems, and fuzzing is a test that automatically generates arbitrary inputs to see where a program breaks. The README states that Codex can also use this marketplace through Claude marketplace compatibility. The implementation language is Python, the license is CC-BY-SA-4.0 (Creative Commons Attribution-ShareAlike), and the repository has 7663 stars.
That said, the evaluation scores only fill in 5.1 for the momentum item, while the novelty, technology, and quality items have no values. The provided records also contain no material backing performance comparisons or real audit application cases. Since the license is also CC-BY-SA-4.0, derivative works are required to meet the same terms. So rather than a list of tools that can be applied to practice right away, it is closer to a starting point for finding which security skills to look at first.