Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
Security skills for Claude
Looking for the best security skills for Claude Code and other AI coding agents? This collection ranks 7 open-source security skills by a blend of GitHub popularity, licensing clarity, and how well each one documents what it does. Skills — sometimes called Agent Skills — are small, shareable bundles of instructions that an agent loads on demand to become better at a specific job, so a strong security skill can save you from re-explaining the same context in every session. The highest-ranked entries here, including Skills, Ctf Skills, Claude Red, pair an active repository with a real open-source license, which matters if you plan to adapt or redistribute them. Every listing links straight back to its original repository so you can read the source, check recent activity, and copy the exact install command. We refresh this ranking daily as stars, forks, and new releases change across the ecosystem.
7 Security skills
Best security picks →Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.
Ultra-high-performance, secure, all-in-one acceleration engine for developer resources
A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.
State-of-the-Art (2026) AI/LLM engineering skills/agents for building and auditing software — 40+ domain & language skills, BUILD/AUDIT modes, audit checklists.
A documentation library for governance, risk, compliance, cybersecurity, privacy, resilience, AI assurance, and operational control practices + a Claude Code rules-and-skills pack distilled from maintaining it.