ctf-skills

Trail of Bits Skills Marketplace packages reusable plugins for AI-assisted security analysis, vulnerability research, testing, and selected development workflows. Users can add the marketplace to Claude Code and install individual plugins through its menu, while Codex can load the same marketplace through Claude plugin compatibility. The collection is aimed at security researchers and engineering teams that want repeatable audit procedures available to their coding agents.

claude-red is a library of on-demand SKILL.md files for web, identity, wireless, cloud, mobile, exploit development, red-team infrastructure, and other attack surfaces. Each skill supplies focused methodology, tooling, edge cases, and escalation paths without loading the entire library into context. It is intended for penetration testers and researchers working on systems they are explicitly authorized to assess.

Claude-OSINT pairs a strategic methodology skill with a tactical reconnaissance arsenal for authorized security work. It helps an agent build an asset graph, investigate web, cloud, identity, and exposed-secret surfaces, and organize findings by scope, confidence, and severity. The repository also includes read-only credential validators, secret-scanning helpers, engagement examples, and reporting templates for red teams, attack-surface reviews, and bug-bounty workflows.

LLM SAST Skills turns a compatible coding assistant into a coordinated static-analysis workflow. It first maps the stack, architecture, entry points, data flows, and trust boundaries, then runs thirteen vulnerability-focused skills in parallel to discover and verify issues such as SQL injection, XSS, RCE, SSRF, authorization flaws, path traversal, unsafe uploads, and business-logic bugs. A final skill consolidates evidence, remediation guidance, and dynamic test instructions by severity. Existing CLAUDE.md or AGENTS.md files may conflict with its orchestrator.