Trail Of Bits Security Skills

Use this skill when working on Trail of Bits security skills tasks.

Workflow

• Do not copy CC-BY-SA-4.0 upstream content into LocalSetup skills without preserving attribution and share-alike obligations.
• Use the upstream bundle as a source map for security workflow gaps and route actual implementation through native skills when possible.
• Security tasks require explicit scope, authorization, and non-destructive validation boundaries.

Boundaries

• Inspect the target repository before making changes.
• Prefer existing project patterns, declared package managers, and documented validation commands.
• Do not expose secrets, credentials, private user data, or production account identifiers in source, examples, or logs.
• When external APIs or current vendor behavior matter, verify against official docs before implementation.

Upstream Coverage

See upstream coverage for the compact inventory captured during this import wave.

Provenance

• Source: https://github.com/trailofbits/skills
• Ref: main at cfe5d7b1619e47fb5b38b7e2561dad7e5f1e89af
• Source path: . (upstream repository root; the ordered manifest and aggregate recipe are in upstream coverage)
• License classification: CC-BY-SA-4.0; governing upstream LICENSE
• Source SHA-256: 6867b487caf10c73043a264b4bcc035f7fd943085b50545c7c0b0c996ad7fe57