Trail of Bits Skills Marketplace A Claude Code plugin marketplace from Trail of Bits providing skills to enhance AI assisted security analysis, testing, and development workflows. Codex can load this marketplace through its Claude marketplace compatibility. Also see: claude code config · skills curated · claude code devcontainer · dropkit Installation Claude Code Marketplace [安装/使用命令见下方] Browse and Install Plugins [安装/使用命令见下方] Codex Codex supports Claude plugin marketplaces directly, so this repository does not need Codex specific sidecar metadata. Install the marketplace with: [安装/使用命令见下方] Local Development To add the marketplace locally (e.g., for testing or development), navigate to the parent directory of this repository: [安装/使用命令见下方] Available Plugins Smart Contract Security Plugin Description building secure contracts Smart contract security toolkit with vulnerability scanners for 6 blockchains entry point analyzer Identify state changing entry points in smart contracts for security auditing Code Auditing Plugin Description agentic actions auditor Audit GitHub Actions workflows for AI agent security vulnerabilities audit context building Build deep architectural context through ultra granular code analysis burpsuite project parser Search and extract data from Burp Suite project files c review Comprehensive C/C++ security review with clustered parallel workers and SARIF output differential review Security focused differential review of code changes with git history analysis dimensional analysis Annotate codebases with dimensional analysis comments to detect unit mismatches and formula bugs fp check Systematic false positive verification for security bug analysis with mandatory gate reviews insecure defaults Detect insecure default configurations, hardcoded credentials, and fail open security patterns rust review Comprehensive Rust security review covering safe/unsafe boundary, memory safety, concurrency, panic DoS, FFI, and async runtime with SARIF output semgr