No signal event on file yet — status is unknown, not "quiet".
- first observed Kanon started keeping permanent history for this agent
| Machine-callable | — | unknown | — |
| Open source | 1 | verified | 1 quote(s) |
| Self-hostable | 1 | inferred | 1 quote(s) |
| Bring your own key | — | unknown | — |
| Autonomy level | — | unknown | — |
| Pricing model | — | unknown | — |
| Integrations | claude-code,codex | inferred | 1 quote(s) |
“Unknown” means we have not verified it — it is not a “no”. Hard filters never treat unknown as false.
Backed by a trusted security firm, it represents one of the most credible and practical implementations of AI in professional code security workflows.
Evidence quotesverbatim, from the product’s own materials
“public GitHub repository (README fetched)”— structural
“/plugin marketplace add trailofbits/skills”— readme
“Codex can load this marketplace through its Claude marketplace compatibility.”— readme
“Codex supports Claude plugin marketplaces directly”— readme
“A Claude Code plugin marketplace from Trail of Bits providing skills”— readme
FAQ
What is skills?
Skills by Trail of Bits is a set of pre-built AI workflows for Claude Code that automate code auditing, vulnerability detection, and security research tasks.
What does skills do?
Automate repetitive, high-skill security tasks like code review and vulnerability scanning using AI-powered workflows tailored for security professionals.
Why does skills matter?
Backed by a trusted security firm, it represents one of the most credible and practical implementations of AI in professional code security workflows.
Is skills open source?
Yes — skills is open source.
Can I self-host skills?
Yes — skills can be self-hosted.
What does skills integrate with?
claude-code,codex
How popular is skills?
As tracked by KanonAgent: 33 upvotes (first indexed 2026-07-31).
What are the best skills alternatives?
Similar AI agents tracked by KanonAgent: Stealth Venture, archify, open-design, deer-flow, ruflo, career-ops.