AI Skills

mermaid-to-proverif

Translates Mermaid sequenceDiagrams describing cryptographic protocols into

mutation-testing

Configures mewt or muton campaigns, analyzes surviving mutants

ossfuzz

Enrolls a project in OSS-Fuzz

research-paper-writing

Improve academic paper writing quality for ML/CV/NLP-style papers

rust-review

Performs comprehensive Rust security review for safe/unsafe boundary issues

ruzzy

Sets up and runs Ruzzy, Trail of Bits' coverage-guided Ruby fuzzer

sarif-parsing

Parses and processes SARIF files from static analysis tools like CodeQL

seatbelt-sandboxer

Generates minimal macOS Seatbelt sandbox configurations

second-opinion

Gets independent code reviews from Codex or Antigravity for uncommitted changes

secure-workflow-guide

Guides through Trail of Bits' 5-step secure development workflow

semgrep

Runs a Semgrep security scan over a codebase: detects languages

skill-improver

Runs an autonomous review-and-fix improvement loop over a Claude Code skill

solana-vulnerability-scanner

Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI

story-setup

网文写作工具集基础设施部署与检查。为 Claude Code / OpenCode / Codex / Google Antigravity / ZCode /

substrate-vulnerability-scanner

Scans Substrate/Polkadot pallets

supply-chain-risk-auditor

Audits a project's dependencies

testing-handbook-generator

Generates Claude Code skills from the Trail of Bits Testing Handbook

token-integration-analyzer

Token integration

ton-vulnerability-scanner

Scans TON (The Open Network) smart contracts

trailmark

Builds and queries multi-language source and binary code graphs

trailmark-structural

Runs full Trailmark structural analysis by building a graph

trailmark-summary

Runs a Trailmark summary analysis on a codebase

vector-forge

Mutation-driven test vector generation

wycheproof

Validates cryptographic implementations against Project Wycheproof's test

yara-rule-authoring

Guides authoring of high-quality YARA-X detection rules

zeroize-audit

Detects missing zeroization of sensitive data in source code

extension-querying-oql

Quick reference for the Caffeine Data Intelligence agent

idosal/git-mcp

Generic remote server that provides documentation

Claude Code PM

by Ran Aroussi - Really comprehensive

agent-orchestration-advisor

Design multi-agent AI workflows with clear boundaries, handoffs, and monitoring

architecture-diagram

Create polished dark-themed architecture diagrams as self-contained HTML+SVG

company-intel

Research a company, industry, or competitor set

derisk-measurement-advisor

Identify what to measure, test, or track to de-risk a product or AI idea

organic-growth-advisor

Identify which organic growth path to pursue

pm-skill-creator

Design a new PM skill through guided conversation

product-sense-interview-answer

Structure a spoken PM product-sense answer

argent-screenshot-diff

Compare saved or live app screenshots with the argent screenshot-diff tool

golang-linter

An installable skill for AI agents

momentic-maintain

Diagnose, classify, triage, and repair failing Momentic tests

app-store-screenshots

Building App Store or Google Play screenshot pages

check

Reviews diffs, PRs, release readiness, and publishing follow-through

clickup

Interact with ClickUp tasks and documents

design

Produces distinctive, production-grade UI for pages, components

health

Audits agent config, instruction drift, hooks or MCP, and AI maintainability

hunt

Finds root cause before any fix

learn

Runs a six-phase research workflow from source bundle to publish-ready output

quick-mockups

Create multiple UI design mockups in parallel

read

Fetches URLs and PDFs, then summarizes or returns clean Markdown

think

Turns rough ideas into approved, decision-complete plans before coding

ui

Produces distinctive production UI and screenshot-grounded visual polish