Claude CodeVersion not established
Review the package's pattern warnings and model-backed code-review hooks before enabling them.
Source: anthropics/claude-plugins-official
Includes Hooks
Model-backed layers can send code and diffs to the configured model endpoint. Review data handling and usage costs.
Matches this task · Scoped workflow notes · Not a runtime testClaude Codev1.3.0 · manifest
Inspect CI workflow review guidance for AI-agent integrations and permissions.
Source: trailofbits/skills
plugins/agentic-actions-auditor · Independent maintainer marketplace
Includes Composition not yet established — not zero components
Manifest observed; full component inventory, installed tools, provider access and task permissions remain unverified.
Matches this task · Manifest fields inspected · Not a runtime testClaude Codev2.0.0 · manifest
Map function assumptions and dependencies before starting a code audit.
Source: trailofbits/skills
plugins/audit-context-building · Independent maintainer marketplace
Includes Composition not yet established — not zero components
Manifest observed; full component inventory, installed tools, provider access and task permissions remain unverified.
Matches this task · Manifest fields inspected · Not a runtime testClaude Codev1.2.0 · manifest
Inspect a smart-contract review toolkit and its chain-specific analysis scope.
Source: trailofbits/skills
plugins/building-secure-contracts · Independent maintainer marketplace
Includes Composition not yet established — not zero components
Manifest observed; full component inventory, installed tools, provider access and task permissions remain unverified.
Matches this task · Manifest fields inspected · Not a runtime testClaude Codev1.1.0 · manifest
Locate a workflow for inspecting saved Burp project data; the component inventory remains unconfirmed.
Source: trailofbits/skills
plugins/burpsuite-project-parser · Independent maintainer marketplace
Includes Composition not yet established — not zero components
Manifest observed, but one sampled Skill path returned 404 at this revision. Full inventory remains unknown; this is not a package withdrawal.
Matches this task · Manifest fields inspected · Not a runtime testClaude Codev2.0.1 · manifest
Select C and C++ review guidance with explicit language and analysis scope.
Source: trailofbits/skills
plugins/c-review · Independent maintainer marketplace
Includes Composition not yet established — not zero components
Manifest observed; full component inventory, installed tools, provider access and task permissions remain unverified.
Matches this task · Manifest fields inspected · Not a runtime testOpenAI / Codexv0.1.22 · manifest
Review documented security analysis and investigation workflows.
Source: openai/plugins
Includes Skills · App connection · MCP configuration
Manifest declarations checked. Account, workspace and task permissions still need confirmation.
Matches this task · Manifest fields inspected · Not a runtime testClaude Codev0.2.4 · manifest
Review cryptographic timing assumptions and compiler-sensitive implementation behavior.
Source: trailofbits/skills
plugins/constant-time-analysis · Independent maintainer marketplace
Includes Composition not yet established — not zero components
Manifest observed; full component inventory, installed tools, provider access and task permissions remain unverified.
Matches this task · Manifest fields inspected · Not a runtime testClaude Codev1.1.2 · manifest
Review security-relevant changes between code revisions rather than treat a listing as an audit result.
Source: trailofbits/skills
plugins/differential-review · Independent maintainer marketplace
Includes Composition not yet established — not zero components
Manifest observed; full component inventory, installed tools, provider access and task permissions remain unverified.
Matches this task · Manifest fields inspected · Not a runtime testClaude Codev1.0.2 · manifest
Identify a workflow for mapping state-changing smart-contract entry points and access conditions.
Source: trailofbits/skills
plugins/entry-point-analyzer · Independent maintainer marketplace
Includes Composition not yet established — not zero components
Manifest observed; full component inventory, installed tools, provider access and task permissions remain unverified.
Matches this task · Manifest fields inspected · Not a runtime testClaude Codev2.2.0 · manifest
Inspect an Android Firebase configuration-review workflow for authorized testing only.
Source: trailofbits/skills
plugins/firebase-apk-scanner · Independent maintainer marketplace
Includes Composition not yet established — not zero components
Manifest observed; full component inventory, installed tools, provider access and task permissions remain unverified.
Matches this task · Manifest fields inspected · Not a runtime testClaude Codev1.0.3 · manifest
Review a candidate security finding for false positives instead of accepting its initial label.
Source: trailofbits/skills
plugins/fp-check · Independent maintainer marketplace
Includes Composition not yet established — not zero components
Manifest observed; full component inventory, installed tools, provider access and task permissions remain unverified.
Matches this task · Manifest fields inspected · Not a runtime test