AI 代码生成与质效
47 个 Skill
mcp-builder
Guide for creating high-quality MCP (Model Context Protocol) servers that enable LLMs to interact wi...
skill-creator
Create new skills, modify and improve existing skills, and measure skill performance. Use when users...
ask-matt
Ask which skill or flow fits your situation. A router over the skills in this repo.
diagnosing-bugs
Diagnosis loop for hard bugs and performance regressions. Use when the user says "diagnose"/"debug t...
tdd
Test-driven development. Use when the user wants to build features or fix bugs test-first, mentions ...
writing-for-agents
Writing documents for agents. Use when creating or editing skills, or modifying AGENTS.md or CLAUDE....
audit-prep-assistant
Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs ...
cairo-vulnerability-scanner
Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic ove...
code-maturity-assessor
Systematic code maturity assessment using Trail of Bits' 9-category framework. Analyzes codebase for...
guidelines-advisor
Smart contract development advisor based on Trail of Bits' best practices. Analyzes codebase to gene...
solana-vulnerability-scanner
Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validatio...
substrate-vulnerability-scanner
Scans Substrate/Polkadot pallets for 7 critical vulnerabilities including arithmetic overflow, panic...
token-integration-analyzer
Token integration and implementation analyzer based on Trail of Bits' token integration checklist. A...
ton-vulnerability-scanner
Scans TON (The Open Network) smart contracts for 3 critical vulnerabilities including integer-as-boo...
differential-review
Performs security-focused differential review of code changes. Adapts analysis depth to codebase siz...
dwarf-expert
Analyzes DWARF debug information in compiled binaries. Use when inspecting .debug_* sections, DIE tr...
entry-point-analyzer
Analyzes smart contract codebases to identify state-changing entry points for security auditing. Det...
modern-python
Configures Python projects with modern tooling (uv, ruff, ty). Use when creating projects, writing s...
open-sourcing
This skill should be used when the user asks to "open source this project", "prepare this repository...
property-based-testing
Writes, reviews, and debugs property-based tests — Hypothesis, fast-check, proptest, jqwik, rapid, a...
second-opinion
Gets independent code reviews from Codex or Antigravity for uncommitted changes, branch diffs, and c...
semgrep-rule-creator
Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns...
address-sanitizer
Builds and runs code under AddressSanitizer to catch buffer overflows, use-after-free, and other mem...
atheris
Sets up and runs Atheris, the coverage-guided Python fuzzer built on libFuzzer. Covers TestOneInput ...
cargo-fuzz
Sets up and runs cargo-fuzz, the standard fuzzing tool for Cargo-based Rust projects. Covers cargo f...
coverage-analysis
Measures and interprets what a fuzzing campaign actually reaches, using llvm-cov, lcov, or a fuzzer'...
fuzzing-obstacles
Patches past the barriers that stop a fuzzer making progress — checksum and hash verification, magic...
harness-writing
Designs and improves fuzzing harnesses for C/C++ and Rust. Covers mapping raw bytes onto a target AP...
libfuzzer
Sets up and runs libFuzzer, the coverage-guided fuzzer built into LLVM, on C/C++ code that compiles ...
ruzzy
Sets up and runs Ruzzy, Trail of Bits' coverage-guided Ruby fuzzer and the only production-ready one...
wycheproof
Validates cryptographic implementations against Project Wycheproof's test vectors, which encode know...
genotoxic
Graph-informed mutation testing triage. Parses codebases with Trailmark, runs mutation testing and n...
graph-evolution
Builds Trailmark code graphs at two source snapshots and computes a structural diff. Surfaces securi...
trailmark-variant-neighborhood
Expands one confirmed or suspected vulnerability into a Trailmark graph neighborhood of variant cand...
vector-forge
Mutation-driven test vector generation. Finds implementations of a cryptographic algorithm or protoc...
writing-lean-proofs
Writes and reviews structured Lean 4 proofs and designs Lean libraries following Mathlib conventions...
zeroize-audit
Detects missing zeroization of sensitive data in source code and identifies zeroization removed by c...
git-commit-helper
Generate conventional commit messages automatically. Use when user runs git commit, stages changes, ...
humanizer
Rewrite AI-sounding text so it reads like the writer, not a chatbot. Keep what it says. Do not make ...
setup-pre-commit
Set up Husky pre-commit hooks with lint-staged (Prettier), type checking, and tests in the current r...
code-review
Review the changes since a fixed point (commit, branch, tag, or merge-base) along two axes: Standard...
interpreting-culture-index
Interprets Culture Index (CI) surveys, behavioral profiles, and personality assessment data. Support...
vulnerability-triage-brocards
-
implement
Implement a piece of work based on a spec or set of tickets.
retro
Conduct a retrospective on a coding session.
resolving-merge-conflicts
Use when you need to resolve an in-progress git merge/rebase conflict.
implement-spec
Implement a specification in code.