Publisher
trailofbits
Public Claude skills and plugins from github.com/trailofbits that Waxell has reviewed.
- 146 reviewed
- 116 no issues
- 20 to review
- 10 high risk
10 resultstrailofbits
- agentic-actions-auditortrailofbitsAudits GitHub Actions workflows for security vulnerabilities in AI agent integrations (Claude Code Action, Gemini CLI, OpenAI Codex,… High riskEngineeringSecurity8k
- agentic-actions-auditortrailofbitsAudits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI… High riskEngineeringSecurity8k
- culture-indextrailofbitsInterprets Culture Index survey results for individuals and teams High riskOther8k
- interpreting-culture-indextrailofbitsInterprets Culture Index (CI) surveys, behavioral profiles, and personality assessment data. Supports individual profile interpretation,… High riskData & analyticsDocuments8k
- devcontainer-setuptrailofbitsCreate pre-configured devcontainers with Claude Code and language-specific tooling High riskEngineeringAI & agents8k
- devcontainer-setuptrailofbitsCreates devcontainers with Claude Code, language-specific tooling (Python/Node/Rust/Go), and persistent volumes. Use when adding… High riskEngineeringProductivity8k
- modern-pythontrailofbitsModern Python best practices. Use when creating new Python projects, and writing Python scripts, or migrating existing projects from… High riskEngineeringProductivity8k
- modern-pythontrailofbitsConfigures Python projects with modern tooling (uv, ruff, ty). Use when creating projects, writing standalone scripts, or migrating from… High riskEngineeringProductivity8k
- testing-handbook-skillstrailofbitsSkills from the Trail of Bits Application Security Testing Handbook (appsec.guide) High riskEngineeringSecurity8k
- libafltrailofbitsBuilds custom fuzzers with LibAFL, the modular Rust fuzzing library. Covers composing observers, feedbacks, mutators, schedulers, and… High riskEngineeringProductivity8k
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF