Setup & Installation
npx skills add https://github.com/trailofbits/skills --skill testing-handbook-skills
https://github.com/trailofbits/skills/tree/main/plugins/testing-handbook-skills
View on GitHubWhat This Skill Does
A meta-skill that reads the Trail of Bits Application Security Testing Handbook and generates Claude Code skills from it. It covers fuzzers (libFuzzer, AFL++, cargo-fuzz), static analysis tools (Semgrep, CodeQL), techniques like harness writing and coverage analysis, and domain-specific testing for crypto. Generated skills are validated before delivery.
Instead of manually extracting and structuring handbook content into skill files, this generator does the analysis, templating, and cross-referencing automatically across all 16 skill types in one pass.
When to use it
- Generating a libFuzzer skill directly from the handbook's fuzzing chapter
- Scaffolding a Semgrep skill with handbook-accurate rule-writing guidance
- Producing a harness-writing skill that cross-references sanitizer and coverage skills
- Running validate-skills.py in CI to catch broken cross-references between generated skills
- Building a full set of 16 coordinated security testing skills from one command