skills/trailofbits__skills
1
0
Fork 0
mirror of https://github.com/trailofbits/skills.git synced 2026-09-14 14:28:48 +08:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • ce9ae2e2dc Add post-patch-validation plugin (#302) main Dan Guido 2026-09-14 01:49:16 -04:00
  • 321ccfe628 deps: Bump ruff (#300) dependabot[bot] 2026-09-09 16:48:14 -04:00
  • d3323cefbc deps: Bump the python-minor-patch group across 2 directories with 2 updates (#296) dependabot[bot] 2026-09-02 13:44:09 -04:00
  • 14e5a10700 burpsuite-project-parser: fail rather than report an unverified search as clean (#288) kz-tob 2026-09-01 09:29:40 -04:00
  • 49699bb474 second-opinion: Gemini CLI is EOL — move to Antigravity, and bump Codex to gpt-5.6-sol (#294) Randy Hanooman 2026-09-01 06:04:15 -07:00
  • b89f6dbc35 Update brocards source URL (#295) dm 2026-09-01 14:32:54 +02:00
  • 6feac677af building-secure-contracts: require a per-pattern coverage table in the five flat scanners (#287) kz-tob 2026-08-31 17:07:57 -04:00
  • bc5991b992 agentic-actions-auditor: report unreadable in-scope references, and widen Vector I at source #286 agentic-actions-cli-detection kz-tob 2026-08-31 16:27:51 -04:00
  • 04ca267830 agentic-actions-auditor: filter every URL value, and fix two vectors that rule themselves out kz-tob 2026-08-31 15:47:30 -04:00
  • c0e88c58c2 agentic-actions-auditor: cut back to the detection fix and the injection fix kz-tob 2026-08-31 15:27:21 -04:00
  • 59d2eef8dd agentic-actions-auditor: make the mandated checks runnable, and filter the ref kz-tob 2026-08-31 14:59:41 -04:00
  • 4b7a6556ba agentic-actions-auditor: quote repo-supplied API paths, and cut the vector sweep back kz-tob 2026-08-31 14:25:22 -04:00
  • 40a0af06d3 agentic-actions-auditor: correct the CLI flag names and reopen the agent signal kz-tob 2026-08-31 11:08:28 -04:00
  • 4d39dcb30d agentic-actions-auditor: make vectors A, C, E and F reachable for a CLI agent kz-tob 2026-08-31 10:40:13 -04:00
  • 1390ff50e6 agentic-actions-auditor: scope the vector files to both invocation surfaces kz-tob 2026-08-31 10:01:18 -04:00
  • 51cc0ec371 Merge main into agentic-actions-cli-detection kz-tob 2026-08-31 09:56:39 -04:00
  • 9645e2f89b agentic-actions-auditor: the pre-v1 claude-code-action inputs, and the composite-action secrets gap (#292) Max Gorbuk 2026-08-31 16:47:18 +03:00
  • ea5327d467 fix(semgrep): three bugs that silently drop entire rulesets (#250) Eduard Milushi 2026-08-31 15:25:14 +02:00
  • 7e7a9b2a5d supply-chain-risk-auditor: discard undecodable cache entries (#291) iflov 2026-08-31 21:40:51 +09:00
  • 734e66d774 agentic-actions-auditor: gate unresolved on an agent signal kz-tob 2026-08-28 16:35:03 -04:00
  • 6df3ab9204 agentic-actions-auditor: fix the overrides at source instead of in SKILL.md kz-tob 2026-08-28 16:07:32 -04:00
  • c5f282daa2 agentic-actions-auditor: close the gaps the second review found kz-tob 2026-08-28 14:55:07 -04:00
  • 8e7313ea9d Merge branch 'main' into agentic-actions-cli-detection kz-tob 2026-08-28 14:39:40 -04:00
  • 3c9632a612 agentic-actions-auditor: carry CLI detection through analysis and reporting kz-tob 2026-08-28 14:25:47 -04:00
  • d7b3b4e3dd agentic-actions-auditor: detect agents invoked from run: blocks kz-tob 2026-08-28 14:01:13 -04:00
  • d1f1575cff audit-context-building: add a dispatch-routing eval case (#285) kz-tob 2026-08-28 13:43:02 -04:00
  • 7dee682744 supply-chain-risk-auditor: don't crash on Windows in the cache owner check (#284) kz-tob 2026-08-27 14:01:58 -04:00
  • f9950784a7 static-analysis: detect every language run-scans.sh can scan (#281) kz-tob 2026-08-27 11:26:19 -04:00
  • 9e3fd2f9e8 constant-time-analysis: pair ilspycmd's TFM with a matching runtime (#283) kz-tob 2026-08-27 11:05:27 -04:00
  • 4518c6df20 mutation-testing: verify source files with find, not a ** glob (#282) kz-tob 2026-08-27 08:58:20 -04:00
  • 5eb104e1c5 deps: Bump ruff (#280) dependabot[bot] 2026-08-26 13:04:46 -04:00
  • 3deb39e7b3 testing-handbook-skills: make 15 descriptions routable (#276) kz-tob 2026-08-26 10:18:41 -04:00
  • 4b1b74b181 Give differential-review a trigger, and name every component in its README (#278) kz-tob 2026-08-26 08:54:12 -04:00
  • 529d093b98 Merge remote-tracking branch 'origin/main' into fp-check-triage-merge #243 fp-check-triage-merge Dan Guido 2026-08-25 15:41:07 -04:00
  • 65720f8db2 Update claude_review.sh to collapse findings and cover whole diff (#279) kz-tob 2026-08-25 14:03:32 -04:00
  • 8c1b2670bf constant-time-analysis: make the VLD version lookup portable (#277) kz-tob 2026-08-25 11:50:11 -04:00
  • 32ad9e6b47 building-secure-contracts: give five skills trigger clauses (#275) kz-tob 2026-08-25 11:11:31 -04:00
  • 43d7af8064 gh-cli: intercept GitHub fetches from MCP fetch tools (#274) kz-tob 2026-08-25 10:38:13 -04:00
  • 6a18b2e90a fixes Maciej Domanski 2026-08-25 15:44:03 +02:00
  • 1004934abf Code improver - better skill-improver (#272) Paweł Płatek 2026-08-25 01:09:59 +02:00
  • 311a784a10 c-review rewrite to workflows + do measurements - CLA clean (#257) Paweł Płatek 2026-08-24 19:06:58 +02:00
  • 9e7054ee8a git-cleanup: convert the skill to a command driving a dynamic workflow (#217) Francesco Bertolaccini 2026-08-24 16:54:33 +02:00
  • 6ca26096b0 Fix the aflpp wrapper TTY requirement and its unpasteable examples (#270) Dan Guido 2026-08-24 09:37:59 -04:00
  • 43d16a56d8 zeroize-audit: give SKILL.md a run entry point and link the Rust patterns reference (#267) Dan Guido 2026-08-24 09:27:02 -04:00
  • 922ec62527 Fix firebase-apk-scanner scanner.sh path and command handoff (#269) Dan Guido 2026-08-24 09:16:46 -04:00
  • 293fb74c31 Add modern-cpp plugin for C++20/23/26 best practices (#142) Julius Alexandre 2026-08-21 10:09:43 -04:00
  • 7be90d6e55 Close unterminated fences in cairo, algorand, and ton scanner skills (#268) Dan Guido 2026-08-20 12:26:56 -04:00
  • 1e0cc133f4 trailmark: pass --language to graph-evolution's diff calls (#266) Dan Guido 2026-08-20 11:39:52 -04:00
  • 9b2813356e static-analysis: resolve SARIF severity from the rule, not just result.level (#271) Dan Guido 2026-08-19 17:38:12 -04:00
  • 700efb909d adversarial-verification: stop telling agents an opposing side exists #148 adversarial-verification-plugin wizardengineer 2026-08-19 13:56:00 -04:00
  • 9e06dc67a3 Make every documented command runnable under our own python shims (#258) Dan Guido 2026-08-19 13:39:07 -04:00
  • 346d70d45d Sync marketplace description with plugin.json wizardengineer 2026-08-19 12:39:10 -04:00
  • ee17718a5c Merge remote-tracking branch 'origin/main' into fix/148-followup wizardengineer 2026-08-19 12:37:27 -04:00
  • 4f75e2eca7 adversarial-verification: close the contradictions the fix pass missed wizardengineer 2026-08-19 12:37:27 -04:00
  • 2c070490c8 adversarial-verification: fix the decision rules the review flagged wizardengineer 2026-08-19 12:21:41 -04:00
  • 0d7b0053c7 Merge origin/main into adversarial-verification-plugin wizardengineer 2026-08-19 12:04:53 -04:00
  • 555dbd6068 feat(diataxis): add Diátaxis documentation plugin with eval suite frabert/diataxis-plugin Francesco Bertolaccini 2026-08-05 15:33:21 +02:00
  • 3edce351f4 Merge branch 'main' into c-review-workflow #238 c-review-workflow Dan Guido 2026-08-19 01:07:40 -04:00
  • 07bce8a2c8 Add goal-prompt plugin for copy-ready /goal commands (#248) Paweł Płatek 2026-08-19 07:02:42 +02:00
  • 4db56eff30 trailmark: update vector-forge skill w/ wycheproof tooling (#251) Daniel McCarney 2026-08-19 00:22:06 -04:00
  • 488d37c71c Collapse the review into one xhigh opus tier, and stop invented evidence (#256) Dan Guido 2026-08-18 21:29:51 -04:00
  • c199e0cc7d Narrow the modern-python shims to the commands uv run replaces (#255) Dan Guido 2026-08-18 20:35:44 -04:00
  • d537432501 Pin the node test reporter in semgrep-rule-variant-creator (#254) Dan Guido 2026-08-18 20:35:40 -04:00
  • f3c8d2a73f Back three AGENTS.md enforcement claims with validator checks (#253) Dan Guido 2026-08-18 20:35:36 -04:00
  • 2bb398210d deps: Bump ruff (#252) dependabot[bot] 2026-08-18 16:22:31 -04:00
  • 3e433ffee0 Exclude supply-chain eval fixtures from Dependabot scans (#245) kz-tob 2026-08-18 16:15:40 -04:00
  • a551f0b5f7 Revise links in README 'Also see' section Dan Guido 2026-08-18 14:13:22 -04:00
  • 04b241176f Rework property-based-testing skill and add eval suites. (#235) Graham Sutherland 2026-08-17 13:34:24 +01:00
  • 4db88ee79d deps: Bump ruff (#246) dependabot[bot] 2026-08-14 10:08:54 -04:00
  • cfea213cce skill-improver: remove the trash dependency and the duplicate command surface (#249) Paweł Płatek 2026-08-14 15:15:34 +02:00
  • 8330ba136c docs(fp-check): drop citations to a deleted doc and counts that had drifted Maciej Domanski 2026-08-14 14:58:26 +02:00
  • 2d72277c76 chore(fp-check): remove MEASUREMENTS.md, a leftover test artifact Maciej Domanski 2026-08-14 14:36:36 +02:00
  • c576fa648e chore(fp-check): remove dead code — the synthetic-capture generator and the landed TODO Maciej Domanski 2026-08-14 12:24:49 +02:00
  • f8645962ee fix(fp-check): bump version to 1.0.4 #188 fix/fp-check-scope-hooks-to-skill Maciej Domanski 2026-08-13 11:17:51 +02:00
  • 58fab28a9e Merge branch 'main' into fix/fp-check-scope-hooks-to-skill ahpaleus 2026-08-13 11:12:24 +02:00
  • 304c81a8ce static-analysis: make the codeql skill's guards real and add tests (#225) Akshay K 2026-08-11 14:57:14 -04:00
  • e6f963bd0b Merge branch 'main' into fix/fp-check-scope-hooks-to-skill kz-tob 2026-08-11 13:50:28 -04:00
  • e6066e7db1 Rebuild supply-chain-risk-auditor around a deterministic collector (#227) Eric Quintero 2026-08-10 16:27:14 -04:00
  • 94abac91ca static-analysis: convert the semgrep scan fan-out to a dynamic workflow (#231) Akshay K 2026-08-10 16:03:13 -04:00
  • 39d8af32a5 another pr-review yes GrosQuildu 2026-08-10 16:27:58 +02:00
  • 1ed0d4874f fix version GrosQuildu 2026-08-10 15:42:00 +02:00
  • feb3eb69fd add batch triage workflow t 2026-08-10 14:51:41 +02:00
  • e1972a4cc4 Merge remote-tracking branch 'origin/main' into c-review-workflow t 2026-08-10 14:51:11 +02:00
  • 59822a80a5 another pr-review t 2026-08-10 14:47:54 +02:00
  • e1a0ca7494 cleanup t 2026-08-10 14:09:41 +02:00
  • e8d8b0726b c-review: fix CI failures and four false claims in the docs t 2026-08-10 13:43:32 +02:00
  • eeac634849 c-review: move the test suite out of scripts/ into tests/ t 2026-08-10 13:30:37 +02:00
  • 6193873a80 clean up t 2026-08-10 13:26:30 +02:00
  • 450e3144e9 fix measurements t 2026-08-10 13:06:04 +02:00
  • b8a018334c c-review: correct what the location-vs-class measurement actually compared t 2026-08-10 13:03:13 +02:00
  • 234630bef6 c-review: 1.2.0 -> 2.0.0 t 2026-08-10 12:55:37 +02:00
  • 0777079e53 pr-review loop t 2026-08-10 12:55:09 +02:00
  • b836530601 c-review: drop references to the benchmark harness t 2026-08-10 12:47:14 +02:00
  • ff9a97c619 rm bench code t 2026-08-10 11:26:03 +02:00
  • 2f5f34c5a8 after more more benchamrks t 2026-08-10 11:23:37 +02:00
  • 5d8497a842 pr-review loop t 2026-08-09 00:00:36 +02:00
  • 3c6a9bc6ae after more benchamrks t 2026-08-08 19:46:53 +02:00
  • b98d0ca009 after measurements 2 t 2026-08-08 11:08:17 +02:00
  • 7b9bd5f950 Add writing-lean-proofs plugin (#226) Fredrik Dahlgren 2026-08-07 22:23:15 +02:00
  • 798dcc1786 after measurements t 2026-08-07 22:17:33 +02:00