---
title: "Trail of Bits skills"
description: "Security-engineering skills that drive CodeQL and Semgrep static analysis from an agent, written by a real appsec firm."
canonical: "https://vibing.inc/library/trail-of-bits-skills-vg-0093"
category: "AI Skills, Agents & MCP"
subcategory: "Skill collections"
license: "open-source"
author: "Trail of Bits"
source: "https://github.com/trailofbits/skills"
---

# Trail of Bits skills
Security-engineering skills that drive CodeQL and Semgrep static analysis from an agent, written by a real appsec firm.
## Facts
- Source: https://github.com/trailofbits/skills
- Category: AI Skills, Agents & MCP / Skill collections
- Author: Trail of Bits
- Licence: open-source
- Tags: claude-skills, security, codeql, semgrep
## Why it's a gem
Actual security consultancy rigour packaged as agent skills, not vibes.
---
Listed in The Vibeary: https://vibing.inc/library/trail-of-bits-skills-vg-0093 · JSON: https://vibing.inc/api/public/library/gems/trail-of-bits-skills-vg-0093