by trailofbits
fuzzing-obstacles helps you patch a target program so fuzzers can bypass checksums, global state, validation gates, and other blockers. Use this fuzzing-obstacles skill to make a System Under Test more fuzzable while keeping production behavior intact. It’s a practical guide for Security Audit workflows and deeper coverage.
by trailofbits
semgrep-rule-variant-creator helps port existing Semgrep rules into target languages with applicability analysis, test-first validation, and separate rule/test outputs. Use the semgrep-rule-variant-creator skill when you need a reliable guide for Semgrep rule expansion across polyglot codebases, not a brand-new rule from scratch.
by trailofbits
semgrep-rule-creator creates production-quality Semgrep rules for security vulnerabilities, bug patterns, taint-flow detections, and coding standards. Use the semgrep-rule-creator skill for Security Audit work when you need precise rules, test cases, and validation instead of a generic draft.
by trailofbits
The wycheproof skill helps validate cryptographic implementations with Wycheproof test vectors, focusing on known attacks, edge cases, and pass/fail decisions for Security Audit workflows. Use it to inspect AES-GCM, ECDSA, ECDH, RSA, and related primitives with less guesswork than a generic crypto prompt.
