跳到正文
cccskills

查找技能

83 个(trailofbits 的仓库) · 按人气排序

Interpret Culture Index behavioral profiles to understand individual traits, team balance, and possible strain from workplace adaptation. Use PDF or JSON data to inform hiring discussions, management approaches, onboarding plans, and conflict mediation.

中文简介正在准备中。当前显示英语简介。

  • Understanding an individual’s behavioral profile
  • Assessing team balance and missing roles
  • Exploring strain from Survey and Job differences
trailofbits/skills76382026年10月16日 更新

Review smart contract projects against Trail of Bits development guidelines. Examines architecture, upgrade mechanisms, implementation, dependencies, and tests, then provides system documentation, identifies gaps, and recommends improvements in priority order with code references.

中文简介正在准备中。当前显示英语简介。

  • Review smart contract architecture
  • Check upgrade and proxy designs
  • Identify gaps in specifications and documentation
trailofbits/skills76382026年10月16日 更新

Inspect DWARF, the debug information stored with compiled code, to find functions and types, check structural integrity, and clarify specification details. Also helps write parsing tools using libraries such as pyelftools, libdwarf, or gimli.

中文简介正在准备中。当前显示英语简介。

  • Finding functions and types in debug information
  • Checking DWARF structural integrity
  • Comparing debug-information quality metrics
trailofbits/skills76382026年10月16日 更新

Reviews Algorand smart contracts written in TEAL or PyTeal for 11 vulnerability patterns. Produces a complete coverage table and findings with code references, severity ratings, and suggested fixes, with optional automated checks using Tealer.

中文简介正在准备中。当前显示英语简介。

  • Security checks before an Algorand contract audit
  • Reviewing TEAL or PyTeal transaction validation
  • Verifying fixes for reported vulnerabilities
trailofbits/skills76382026年10月16日 更新

Review Cosmos SDK modules and CosmWasm contracts for vulnerabilities that could halt a chain, cause fund loss, or produce inconsistent state. Findings are checked against consensus execution paths and saved as individual Markdown reports with severity and fixes.

中文简介正在准备中。当前显示英语简介。

  • Auditing custom Cosmos SDK modules
  • Reviewing IBC integrations
  • Assessing chain security before launch
trailofbits/skills76382026年10月16日 更新

codeql

免费

Scans code for security vulnerabilities with CodeQL by tracing data across functions. Builds and checks analysis databases, models project-specific APIs, and saves findings in SARIF, a structured results format, with broad or focused scan options.

中文简介正在准备中。当前显示英语简介。

  • Scanning a codebase for security vulnerabilities
  • Tracing untrusted input through custom APIs
  • Choosing broad or high-precision security scans
trailofbits/skills76382026年10月16日 更新

Build a documented understanding of unfamiliar code before a security audit. It records function assumptions, guarantees, dependencies, and open questions, producing a dossier and individual function notes to support later vulnerability analysis.

中文简介正在准备中。当前显示英语简介。

  • Understanding unfamiliar code before an audit
  • Mapping dependencies for threat modeling
  • Preparing background notes for an architecture review
trailofbits/skills76382026年10月16日 更新

Review smart contract security through five steps covering Slither scans, special features, diagrams, documented safety conditions, and manual checks. Get project-specific findings, testing setup guidance, and a prioritized action plan for development or deployment reviews.

中文简介正在准备中。当前显示英语简介。

  • Review smart contract security before deployment
  • Triage Slither findings and false positives
  • Visualize inheritance and access permissions
trailofbits/skills76382026年10月16日 更新

Use a randomized tarot spread to guide loosely defined tasks or choose among reasonable approaches. It interprets 36 cards across 12 areas, turning their themes into concrete next steps and possible investigation angles.

中文简介正在准备中。当前显示英语简介。

  • Choosing an approach for a casually delegated task
  • Breaking a tie between reasonable options
  • Finding a new angle when planning stalls
trailofbits/skills76382026年10月16日 更新

Run repeated code reviews and fixes using an installed reviewer chosen by the user. The workflow tracks findings across rounds, checks that edits stay within scope, and reports whether blocking issues were resolved or further decisions are needed.

中文简介正在准备中。当前显示英语简介。

  • Repeat reviews and fixes for a module
  • Improve code using a specific installed reviewer
  • Keep automated edits within an agreed file scope
trailofbits/skills76382026年10月16日 更新

Set up Python projects and standalone scripts with uv for dependencies, ruff for code checks and formatting, and ty for type checking. Configure tests and project files, or migrate existing workflows when requested.

中文简介正在准备中。当前显示英语简介。

  • Starting a Python project or reusable package
  • Writing a standalone script with external dependencies
  • Configuring formatting, type checks, and tests
trailofbits/skills76382026年10月16日 更新