Fodhol/skills
🚀 Enhance your AI-assisted security workflows with plugins from the Trail of Bits Skills Marketplace for smarter analysis and testing.
What's novel
🚀 Enhance your AI-assisted security workflows with plugins from the Trail of Bits Skills Marketplace for smarter analysis and testing.
Code Analysis
19 files read · 7 roundsA Trail of Bits Claude Code plugin marketplace containing 20+ security-focused skills, with the primary code contribution being a constant-time assembly analyzer (ct-analyzer) that compiles source code and detects timing side-channel vulnerabilities by scanning for variable-time instructions (divisi
Strengths
The ct-analyzer is a genuinely useful security tool with deep domain knowledge (KyberSlash, Barrett reduction, ML-DSA), comprehensive multi-architecture instruction tables, well-structured test samples across 10+ languages, and a clean dataclass-based architecture. The test suite includes real integration tests that compile actual code and verify detection.
Weaknesses
The root README is a complete scam/malware distribution page with fake download links and generic 'system requirements' that has nothing to do with the actual project — this is a severe trust and security issue. The core analyzer logic (AssemblyParser.parse, Compiler classes, analyze_source) could not be fully verified due to file size, and the script_analyzers.py (124kb) remains unverified.
Score Breakdown
Signal breakdown
Innovation
Craft
Traction
Scope
Evidence
Commits
34
Contributors
13
Files
271
Active weeks
4
Repository
Language
Python
Stars
1
Forks
0
License
CC-BY-SA-4.0