trailofbits security scan results

49 skills from trailofbits scanned, 5 with at least one finding, as of 2026-10-22. Source: https://github.com/trailofbits/skills.

49Skills
5With Issues
67Findings
28Critical
6High
12Medium
21Low

Findings by category

Command Injection
24
Data Exfiltration
10
Policy Violation
9
Hardcoded Secrets
9
Obfuscation
3
Transitive Trust Abuse
3
Social Engineering
3
Resource Abuse
3
Prompt Injection
2
Unauthorized Tool Use
1

Highest-risk skills

  1. yara-rule-authoring ISSUES FOUND 19 findings
  2. constant-time-testing ISSUES FOUND 12 findings
  3. libafl ISSUES FOUND 8 findings
  4. fuzzing-dictionary ISSUES FOUND 4 findings
  5. firebase-apk-scanner ISSUES FOUND 4 findings
  6. ruzzy SAFE 8 findings
  7. testing-handbook-generator SAFE 3 findings
  8. spec-to-code-compliance SAFE 2 findings
  9. aflpp SAFE 1 findings
  10. audit-prep-assistant SAFE 1 findings

All trailofbits skills

Name Verdict SkillSpector Findings Critical High Medium Low
yara-rule-authoring ISSUES FOUND Do not install 100 19 15 3 0 1
constant-time-testing ISSUES FOUND Caution 0 12 8 0 2 2
libafl ISSUES FOUND Caution 25 8 4 0 0 4
fuzzing-dictionary ISSUES FOUND Caution 0 4 1 0 0 3
firebase-apk-scanner ISSUES FOUND Caution 48 4 0 3 1 0
ruzzy SAFE Caution 0 8 0 0 3 5
testing-handbook-generator SAFE Do not install 100 3 0 0 2 1
spec-to-code-compliance SAFE Caution 0 2 0 0 2 0
aflpp SAFE Caution 41 1 0 0 1 0
audit-prep-assistant SAFE Caution 20 1 0 0 1 0
ossfuzz SAFE Caution 35 3 0 0 0 3
codeql SAFE Caution 0 1 0 0 0 1
variant-analysis SAFE Caution 20 1 0 0 0 1
address-sanitizer SAFE Caution 0 0 0 0 0 0
algorand-vulnerability-scanner SAFE Do not install 87 0 0 0 0 0
ask-questions-if-underspecified SAFE Safe 0 0 0 0 0 0
atheris SAFE Caution 28 0 0 0 0 0
audit-context-building SAFE Caution 38 0 0 0 0 0
burpsuite-project-parser SAFE Caution 36 0 0 0 0 0
cairo-vulnerability-scanner SAFE Caution 41 0 0 0 0 0
cargo-fuzz SAFE Caution 0 0 0 0 0 0
claude-in-chrome-troubleshooting SAFE Do not install 85 0 0 0 0 0
code-maturity-assessor SAFE Caution 45 0 0 0 0 0
constant-time-analysis SAFE Do not install 100 0 0 0 0 0
cosmos-vulnerability-scanner SAFE Caution 37 0 0 0 0 0
coverage-analysis SAFE Caution 0 0 0 0 0 0
differential-review SAFE Safe 7 0 0 0 0 0
dwarf-expert SAFE Caution 0 0 0 0 0 0
entry-point-analyzer SAFE Caution 10 0 0 0 0 0
fix-review SAFE Caution 0 0 0 0 0 0
fuzzing-obstacles SAFE Caution 0 0 0 0 0 0
guidelines-advisor SAFE Safe 7 0 0 0 0 0
harness-writing SAFE Caution 0 0 0 0 0 0
insecure-defaults SAFE Caution 29 0 0 0 0 0
interpreting-culture-index SAFE Caution 13 0 0 0 0 0
libfuzzer SAFE Caution 0 0 0 0 0 0
modern-python SAFE Do not install 82 0 0 0 0 0
property-based-testing SAFE Caution 20 0 0 0 0 0
sarif-parsing SAFE Do not install 64 0 0 0 0 0
secure-workflow-guide SAFE Safe 7 0 0 0 0 0
semgrep SAFE Caution 20 0 0 0 0 0
semgrep-rule-creator SAFE Caution 38 0 0 0 0 0
semgrep-rule-variant-creator SAFE Caution 35 0 0 0 0 0
sharp-edges SAFE Do not install 100 0 0 0 0 0
solana-vulnerability-scanner SAFE Caution 0 0 0 0 0 0
substrate-vulnerability-scanner SAFE Caution 49 0 0 0 0 0
token-integration-analyzer SAFE Caution 0 0 0 0 0 0
ton-vulnerability-scanner SAFE Caution 7 0 0 0 0 0
wycheproof SAFE Caution 0 0 0 0 0 0