Status basis: github_stars gained 775 in the last 3d after a flat 3d baseline (no prior movement to compare a ratio against)
- Accelerating github_stars gained 775 in the last 3d after a flat 3d baseline (no prior movement to compare a ratio against)
- Reactivated github_stars did not move for 7d, then gained 775 in the last 3d
- Anomaly daily change 10.0 is -19.4 standard deviations from this entity's own prior mean (29.4±0.0, baseline excludes this point) — unusual, not necessarily adoption
- Accelerating github_stars gained 775 in the last 3d after a flat 3d baseline (no prior movement to compare a ratio against)
- Reactivated github_stars did not move for 7d, then gained 775 in the last 3d
- Anomaly daily change 10.0 is -19.4 standard deviations from this entity's own prior mean (29.4±0.0, baseline excludes this point) — unusual, not necessarily adoption
- Accelerating github_stars gained 766 in the last 3d after a flat 3d baseline (no prior movement to compare a ratio against)
- Reactivated github_stars did not move for 7d, then gained 766 in the last 3d
- Anomaly daily change 10.0 is -19.4 standard deviations from this entity's own prior mean (29.4±0.0, baseline excludes this point) — unusual, not necessarily adoption
- first observed Kanon started keeping permanent history for this agent
| Machine-callable | — | unknown | — |
| Open source | 1 | verified | 1 quote(s) |
| Self-hostable | 1 | inferred | 1 quote(s) |
| Bring your own key | — | unknown | — |
| Autonomy level | — | unknown | — |
| Pricing model | — | unknown | — |
| Integrations | claude-code,codex | inferred | 1 quote(s) |
“Unknown” means we have not verified it — it is not a “no”. Hard filters never treat unknown as false.
Backed by a trusted security firm, it represents one of the most credible and practical implementations of AI in professional code security workflows.
Evidence quotesverbatim, from the product’s own materials
“public GitHub repository (README fetched)”— structural
“/plugin marketplace add trailofbits/skills”— readme
“Codex can load this marketplace through its Claude marketplace compatibility.”— readme
“Codex supports Claude plugin marketplaces directly”— readme
“A Claude Code plugin marketplace from Trail of Bits providing skills”— readme
FAQ
What is skills?
Skills by Trail of Bits is a set of pre-built AI workflows for Claude Code that automate code auditing, vulnerability detection, and security research tasks.
What does skills do?
Automate repetitive, high-skill security tasks like code review and vulnerability scanning using AI-powered workflows tailored for security professionals.
Why does skills matter?
Backed by a trusted security firm, it represents one of the most credible and practical implementations of AI in professional code security workflows.
Is skills open source?
Yes — skills is open source.
Can I self-host skills?
Yes — skills can be self-hosted.
What does skills integrate with?
claude-code,codex
How popular is skills?
As tracked by KanonAgent: 18 upvotes (first indexed 2026-07-31).
What are the best skills alternatives?
Similar AI agents tracked by KanonAgent: open-design, deer-flow, ruflo, career-ops, archify, cherry-studio.