๐ŸŽฏ

graph-evolution

๐ŸŽฏSkill

from trailofbits/skills

VibeIndex|
What it does
|

Compares Trailmark code graphs at two source snapshots (commits, tags, or directories) and surfaces security-relevant structural changes โ€” new attack paths, blast radius growth, taint propagation shifts, and privilege boundary changes that text diffs miss. Designed for pre-release audits and differential security review over a range of commits.

๐Ÿ“ฆ

Same repository

trailofbits/skills(105 items)

graph-evolution

Installation

Vibe Index InstallInstalls to .claude/skills/ - auto-recognized by Claude Code
npx vibeindex add trailofbits/skills --skill graph-evolution
skills.sh Installโš  Installs to .agents/skills/ - may not be auto-recognized by Claude Code
npx skills add trailofbits/skills --skill graph-evolution
Manual InstallCopy SKILL.md content and save to the path below
~/.claude/skills/graph-evolution/SKILL.md

SKILL.md

602Installs
-
AddedApr 3, 2026

More from this repository10

๐Ÿ”Œ
insecure-defaults๐Ÿ”ŒPlugin

Trail of Bits code-auditing plugin that detects insecure default configurations, hardcoded credentials, and fail-open security patterns during AI-assisted security review.

๐Ÿ”Œ
burpsuite-project-parser๐Ÿ”ŒPlugin

Trail of Bits code-auditing plugin that searches and extracts data from Burp Suite project files for AI-assisted security analysis.

๐Ÿ”Œ
constant-time-analysis๐Ÿ”ŒPlugin

Trail of Bits verification plugin that detects compiler-induced timing side-channels in cryptographic code โ€” credited with finding a timing side-channel in ML-DSA signing (RustCrypto).

๐Ÿ”Œ
semgrep-rule-creator๐Ÿ”ŒPlugin

Trail of Bits code-auditing plugin that creates and refines Semgrep rules for custom vulnerability detection.

๐Ÿช
trailofbits-skills๐ŸชMarketplace

A Claude Code plugin marketplace from Trail of Bits providing skills for AI-assisted security analysis, testing, and development workflows.

๐Ÿ”Œ
gh-cli๐Ÿ”ŒPlugin

Intercepts GitHub URL fetches and curl/wget commands, redirecting to the authenticated gh CLI. Includes gh CLI usage guidance.

๐ŸŽฏ
ask-questions-if-underspecified๐ŸŽฏSkill

A Claude Code plugin marketplace from Trail of Bits providing skills for AI-assisted security analysis, testing, and development workflows.

๐Ÿ”Œ
workflow-skill-design๐Ÿ”ŒPlugin

Teaches design patterns for workflow-based Claude Code skills and provides a review agent for auditing existing skills

๐Ÿ”Œ
yara-authoring๐Ÿ”ŒPlugin

YARA-X detection rule authoring with linting and quality analysis

๐ŸŽฏ
semgrep๐ŸŽฏSkill

Runs Semgrep static analysis for security vulnerability detection and code quality enforcement, from the Trail of Bits Skills Marketplace for AI-assisted security workflows.