Inside The Machine
Part drawing · T-174

Trail of Bits Skills

Security skills: find bugs and audit code.

Open the README (opens in a new tab)

Title block: Trail of Bits Skills

T-174
Part no.
T-174Sheet 174 of 268
GitHub stars
7,687Read 2026-10-21
Last activity
2026-10-21Last code push
Group
SkillsDrawer 13
Layer
Harness3 of 5 in the stack
License
CC-BY-SA-4.0
Kind
Code on GitHub
Language
Python
Install
Not tested yetCatalog entry
Gap Score
not scored yetStatus: pending test on Mac Studio
Entry checked
2026-10-21
1Install

Install: not tested yet.

We list this tool, but we have not run its install.

Not tested yet

Follow the project’s own instructions. Our agent file lists the steps we found in its README or docs, marked unverified, so an AI agent can read them with you.

Open the README (opens in a new tab)Steps we found (.md)
2What it is

Where it sits in the stack.

  1. 5ToolsIts hands and senses.
  2. 4MemoryWhat it remembers.
  3. 3HarnessThis partTrail of Bits Skills sits here.
  4. 2RuntimeRuns the model.
  5. 1ModelThe brain you download.
Fig. 3The local AI stack, pulled apart. Trail of Bits Skills sits on layer 3, the harness layer.

In plain words

Trail of Bits Skills: Security skills: find bugs and audit code.

Its layer · Harness

The harness is the app around the model. It turns answers into actions: a chat window, code edits, tasks done for you.

Its group · Skills

Ready-made know-how your agent can load: one folder per task. 27 tools share this drawer.

3Links and handoff
setups/trailofbits-skills.md

Hand this page to your agent.

The Agent view is this page as plain text: every field above, plus the install steps we found (not tested). An AI agent can read it and do the setup with you.

.md.json
4Same drawer

More in Skills.

The next parts in this drawer, in part-number order. Bar: share of the most starred tool (OpenClaw, 392,108).catalog.json ·
No.PartWhat it doesLicenseGitHub starsLast activity
T-175Vercel Agent SkillsJavaScriptReact, Next.js and web design rules from Vercel.React, Next.js and web design rules from Vercel.unknown32,7712026-10-14
T-149Anthropic SkillsPythonMake PDFs, Word, Excel and slide files; write new skills.Make PDFs, Word, Excel and slide files; write new skills.unknown182,7472026-10-09
T-150Black Forest Labs SkillsTypeScriptFLUX image and video prompts from the FLUX makers.FLUX image and video prompts from the FLUX makers.MIT1342026-09-09
T-151Callstack SkillsShellReact Native skills from Callstack.React Native skills from Callstack.MIT1,6792026-10-08
T-152Cloudflare SkillsShellSkills for building on Cloudflare.Skills for building on Cloudflare.Apache-2.03,1332026-10-19
T-153ElevenLabs SkillsPythonVoice, music and sound effects with ElevenLabs.Voice, music and sound effects with ElevenLabs.MIT5002026-10-19
6 of the 26 other tools in this group.All 27 in Skills
Agent view · text/markdown · or send Accept: text/markdown
---
schema: "https://insidethemachine.ai/schema/listing.schema.json"
slug: "trailofbits-skills"
name: "Trail of Bits Skills"
kind: "repo"
tier: "catalog"
category: "skills"
category_label: "Skills"
stack_layer: "harness"
homepage: null
repo: "https://github.com/trailofbits/skills"
license: "CC-BY-SA-4.0"
stars: 7687
stars_as_of: "2026-10-21"
last_push: "2026-10-21"
archived: false
part_no: "T-174"
labels: []
tags: []
seen_in_videos: []
gap_score: null
gap_score_status: "pending test on Mac Studio"
verified_on: "2026-10-21"
---

Trail of Bits Skills 


**What:** Security skills: find bugs and audit code.

**Why:** Ready-made know-how your agent can load: one folder per task.

**Category:** Skills · **Stack layer:** harness

Status 


Catalog entry. Existence and repo metadata checked 2026-10-21 via the GitHub API. Install commands below are auto-extracted from the README and have NOT been executed or verified. Read the README before running anything; prefer a sandbox or venv.

Install (unverified) 


1. [any] source: Hermes Agent docs, skills page (read 2026-10-21); status: unverified, not executed

```bash
hermes skills tap add trailofbits/skills
```

2. [any] source: Hermes Agent docs, skills page (read 2026-10-21); status: unverified, not executed

```bash
hermes skills search <word> --source github
```

3. [any] source: Hermes Agent docs, skills page (read 2026-10-21); status: unverified, not executed

```bash
hermes skills install <id from search>
```

4. [any] source: vercel-labs/skills docs/commands.md (read 2026-10-21); status: unverified, not executed

```bash
npx skills add trailofbits/skills --list
```

5. [any] source: vercel-labs/skills docs/commands.md (read 2026-10-21); status: unverified, not executed

```bash
npx skills add trailofbits/skills --skill <name>
```

Verify 


No verified check yet. Minimum: the install command exits 0 and the tool's own help/version flag runs (exact flag: see README).

Rollback (unverified) 


1. source: vercel-labs/skills docs/commands.md (read 2026-10-21)

```bash
npx skills remove <name>
```

Links 


- Repo: https://github.com/trailofbits/skills
- README: https://github.com/trailofbits/skills#readme

Part sheet (human page https://insidethemachine.ai/setups/trailofbits-skills) 


- Part number: T-174 (sheet 174 of 268). Part numbers follow the stack: layer, then group, then A to Z by name. Star counts never move a number.
- Group: Skills (drawer 13 of 20, https://insidethemachine.ai/setups/c/skills). Layer: 3 of 5, harness.
- GitHub (catalog.json, read 2026-10-21): 7,687 stars; last code push 2026-10-21.
- Install: Not tested yet (catalog entry).
- Entry checked: 2026-10-21.
- Next parts in this drawer: T-175 Vercel Agent Skills (https://insidethemachine.ai/setups/vercel-agent-skills), T-149 Anthropic Skills (https://insidethemachine.ai/setups/anthropic-skills), T-150 Black Forest Labs Skills (https://insidethemachine.ai/setups/bfl-skills), T-151 Callstack Skills (https://insidethemachine.ai/setups/callstack-skills), T-152 Cloudflare Skills (https://insidethemachine.ai/setups/cloudflare-skills), T-153 ElevenLabs Skills (https://insidethemachine.ai/setups/elevenlabs-skills).
- Previous part: T-173 Superpowers (https://insidethemachine.ai/setups/superpowers). Next part: T-175 Vercel Agent Skills (https://insidethemachine.ai/setups/vercel-agent-skills).