Agent skills
Skills you can use with AI coding agents, indexed from public GitHub repositories.
-
enact/text-summarizer
Analyzes text and provides word count, character count, and sentence statistics
while-basic/enact-template
-
enact/hello-simple
A bare-bones example that prints a greeting
while-basic/enact-template
-
enact/json-formatter
Formats and prettifies JSON with configurable indentation
while-basic/enact-template
-
enact/hello-rust
A simple Rust greeting tool
while-basic/enact-template
-
enact/formatter
Formats and prettifies JSON with configurable indentation
while-basic/enact-template
-
enact/hello-python
A simple Python greeting tool
while-basic/enact-template
-
enact/docs/guide
LLM guide for creating, publishing, and running Enact tools
while-basic/enact-template
-
enact/hello-go
A simple Go greeting tool
while-basic/enact-template
-
test/failing-test
A test tool that fails with visible output
while-basic/enact-template
-
test/build-error
Tests error visibility for build step failures
while-basic/enact-template
-
enact/playwright
Browser automation tool using Playwright - captures screenshots and extracts content from web pages
while-basic/enact-template
-
gh-cli
Enforces authenticated gh CLI workflows over unauthenticated curl/WebFetch patterns. Use when working with GitHub URLs, API access, pull requests, or issues.
trailofbits/skills 4,181
-
supply-chain-risk-auditor
Identifies dependencies at heightened risk of exploitation or takeover. Use when assessing supply chain attack surface, evaluating dependency health, or scoping security engagements.
trailofbits/skills 4,181
-
zeroize-audit
Detects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizations, with assembly-level analysis, and control-flow verification. Use for auditing C/C++/Rust code handling secrets, keys, passwords, or other sensitive data.
trailofbits/skills 4,181
-
sharp-edges
Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when reviewing API designs, configuration schemas, cryptographic library ergonomics, or evaluating whether code follows 'secure by default' and 'pit of success' principles. Triggers: footgun, misuse-resistant, secure defaults, API usability, dangerous configuration.
trailofbits/skills 4,181
-
insecure-defaults
Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or analyzing environment variable handling.
trailofbits/skills 4,181
-
dwarf-expert
Provides expertise for analyzing DWARF debug files and understanding the DWARF debug format/standard (v3-v5). Triggers when understanding DWARF information, interacting with DWARF files, answering DWARF-related questions, or working with code that parses DWARF data.
trailofbits/skills 4,181
-
differential-review
Performs security-focused differential review of code changes (PRs, commits, diffs). Adapts analysis depth to codebase size, uses git history for context, calculates blast radius, checks test coverage, and generates comprehensive markdown reports. Automatically detects and prevents security regressions.
trailofbits/skills 4,181
-
constant-time-analysis
Detects timing side-channel vulnerabilities in cryptographic code. Use when implementing or reviewing crypto code, encountering division on secrets, secret-dependent branches, or constant-time programming questions in C, C++, Go, Rust, Swift, Java, Kotlin, C#, PHP, JavaScript, TypeScript, Python, or Ruby.
trailofbits/skills 4,181
-
semgrep-rule-creator
Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Use when writing Semgrep rules or building custom static analysis detections.
trailofbits/skills 4,181
-
burpsuite-project-parser
Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bodies with regex patterns, extracting security audit findings, dumping proxy history or site map data, or analyzing HTTP traffic captured in a Burp project.
trailofbits/skills 4,181
-
designing-workflow-skills
Guides the design and structuring of workflow-based Claude Code skills with multi-step phases, decision trees, subagent delegation, and progressive disclosure. Use when creating skills that involve sequential pipelines, routing patterns, safety gates, task tracking, phased execution, or any multi-step workflow. Also applies when reviewing or refactoring existing workflow skills for quality.
trailofbits/skills 4,181
-
interpreting-culture-index
Interprets Culture Index (CI) surveys, behavioral profiles, and personality assessment data. Supports individual profile interpretation, team composition analysis (gas/brake/glue), burnout detection, profile comparison, hiring profiles, manager coaching, interview transcript analysis for trait prediction, candidate debrief, onboarding planning, and conflict mediation. Accepts extracted JSON or PDF input via OpenCV extraction script.
trailofbits/skills 4,181
-
spec-to-code-compliance
Verifies code implements exactly what documentation specifies for blockchain audits. Use when comparing code against whitepapers, finding gaps between specs and implementation, or performing compliance checks for protocol implementations.
trailofbits/skills 4,181