← Voltar para o catálogo
Security-focused static analysis and code auditing skills from Trail of Bits. Includes CodeQL deep analysis, Semgrep scanning, and SARIF result processing. Use when performing security audits, running static analysis, scanning for vulnerabilities, or processing scan results.
Ver no GitHub ↗
Copiar URL do repo
Copiar link do SKILL.md Licença: MIT
Como adicionar
Copiar comando
/plugin marketplace add georgekhananaev/claude-skills-vault
O comando exato pode variar conforme o repositório. Confira o README no GitHub.
Para o autor da skill
Cole no README do seu repo
Mostra que sua skill está catalogada na Skillteca, gera backlink e tráfego rastreável.
[](https://www.skillteca.com.br/skills/trailofbits-security)
Copiar snippet
Habilidade de pesquisa de segurança em Modo Equipe que orquestra 3 caçadores de vulnerabilidades e 2 engenheiros de PoC para auditar um código, provar explorabilidade, classificar causas raiz e calibrar a severidade. É utilizada para revisão de segurança, pesquisa de vulnerabilidades, auditoria de explorabilidade e validação de modelo de ameaças.
Segurança
por code-yeongyu
security-scanning-security-dependencies
You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across multiple ecosystems to identify vulnerabilities, assess risks, and provide automated remediation strategies.
Segurança
#ai
#git
por sickn33
Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.
Segurança
#ai
#git
por sickn33
dependency-management-deps-audit
You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.
Segurança
#ai
#git
por sickn33
Alerta por categoria
1 email curto, só com as skills novas de Segurança. 4 minutos de leitura, sem spam, cancela com 1 clique.
Você confirma o email no primeiro envio. Sem spam. Cancela com 1 clique.
Ler descrição completa Recolher descrição Trail of Bits Security Skills
Security-focused static analysis and code auditing toolkit from Trail of Bits.
Available Sub-Skills
| Skill | File | Use When | |-------|------|----------| | CodeQL Analysis | [codeql-SKILL.md](codeql-SKILL.md) | Deep interprocedural taint tracking, data flow analysis | | Semgrep Scanning | [semgrep-SKILL.md](semgrep-SKILL.md) | Fast pattern-based security scanning with parallel execution | | SARIF Parsing | [sarif-parsing-SKILL.md](sarif-parsing-SKILL.md) | Processing and aggregating static analysis results |
When to Use
Security audit of a codebase -> Start with Semgrep for speed, then CodeQL for depthQuick vulnerability scan -> Semgrep with "important only" modeDeep data flow analysis -> CodeQL with custom data extensionsProcessing scan results -> SARIF parsing for aggregation, deduplication, CI/CD integrationWorkflow
Run Semgrep for fast initial scan (pattern-based) Run CodeQL for deep interprocedural analysis (data flow + taint tracking) Use SARIF parsing to aggregate, deduplicate, and prioritize findings Review and triage results by severity Source
From trailofbits/skills - the static-analysis plugin.
Compartilhar
X
LinkedIn
Copiar link
