Guide accessibility reviews for UI, documents, and workflows. Use for WCAG-oriented audits, keyboard review, semantics, contrast, and remediation planning.
中文简介正在准备中。当前显示原文说明。
CruxExperts/LocalSetup62026年10月22日 更新
免费在 GitHub 公开
ls-trail-of-bits
Attribution-preserving wrapper for Trail of Bits security skills. Use when evaluating security review, audit, fuzzing, and vulnerability-analysis workflows.
中文简介正在准备中。当前显示原文说明。
实测评分 未实测
查看安装方法包含的文件（2）
- SKILL.md2.1 KB
- references/upstream-coverage.md11.2 KB
SKILL.md（原文）
安装前可以查看交给 AI 代理的指令内容。
Trail Of Bits Security Skills
Use this skill when working on Trail of Bits security skills tasks.
Workflow
- Do not copy CC-BY-SA-4.0 upstream content into LocalSetup skills without preserving attribution and share-alike obligations.
- Use the upstream bundle as a source map for security workflow gaps and route actual implementation through native skills when possible.
- Security tasks require explicit scope, authorization, and non-destructive validation boundaries.
Boundaries
- Inspect the target repository before making changes.
- Prefer existing project patterns, declared package managers, and documented validation commands.
- Do not expose secrets, credentials, private user data, or production account identifiers in source, examples, or logs.
- When external APIs or current vendor behavior matter, verify against official docs before implementation.
Upstream Coverage
See upstream coverage for the compact inventory captured during this import wave.
Provenance
- Source:
https://github.com/trailofbits/skills - Ref:
mainatcfe5d7b1619e47fb5b38b7e2561dad7e5f1e89af - Source path:
.(upstream repository root; the ordered manifest and aggregate recipe are in upstream coverage) - License classification:
CC-BY-SA-4.0; governing upstream LICENSE - Source SHA-256:
6867b487caf10c73043a264b4bcc035f7fd943085b50545c7c0b0c996ad7fe57
评价
还没有评价。欢迎分享你的使用感受。
评论
无需登录即可发表。欢迎分享使用感受、提问，或说明在哪些环境下无法运行。
还没有评论。来写第一条吧。
同一仓库的技能
Use when choosing a LocalSetup Agent-* lane for exploration, research, bounded implementation, or review. Consult the static capability matrix; do not probe account or network availability.
中文简介正在准备中。当前显示原文说明。
CruxExperts/LocalSetup62026年10月22日 更新
Guide agent email inbox workflows with prompt-injection defenses. Use for inbound email processing, webhooks, routing, and safety review.
中文简介正在准备中。当前显示原文说明。
CruxExperts/LocalSetup62026年10月22日 更新
Navigate and understand codebases using agentlens hierarchical documentation. Use when exploring new projects, finding modules, locating symbols in large files, finding TODOs/warnings, or understanding code structure.
中文简介正在准备中。当前显示原文说明。
CruxExperts/LocalSetup62026年10月22日 更新
Use for Agent Q signed encrypted file-drop or mail ship and ingest, private registry v2 setup, queue status, and transport maintenance.
中文简介正在准备中。当前显示原文说明。
CruxExperts/LocalSetup62026年10月22日 更新
Inventory wrapper for the alirezarezvani Claude skills bundle. Use when triaging its broad skill catalog and large script surface before any targeted import.
中文简介正在准备中。当前显示原文说明。
CruxExperts/LocalSetup62026年10月22日 更新