semgrep
trailofbits
Find security flaws in your code with Semgrep.
Application security
GitHub publisher83 Skills347.3k installs
Organization · Trail of Bits · www.trailofbits.com · On GitHub since 2012
semgrep
trailofbits
Find security flaws in your code with Semgrep.
Application security
modern-python
trailofbits
Modern tooling for your Python projects.
Python development
supply-chain-risk-auditor
trailofbits
Find supply-chain risks in your dependencies.
Software supply-chain security
differential-review
trailofbits
Find security regressions before they spread.
Code security
codeql
trailofbits
Find security flaws across your code with CodeQL.
Application security
secure-workflow-guide
trailofbits
Secure your smart contracts from scan to action plan.
Smart contract security
code-maturity-assessor
trailofbits
Know how mature your smart-contract codebase is.
Smart contract security
fp-check
trailofbits
Find out whether a suspected security bug is real.
Security verification
agentic-actions-auditor
trailofbits
Catch prompt injection risks in GitHub Actions.
CI/CD security
property-based-testing
trailofbits
Find bugs across your code's whole input range.
Software testing
gh-cli
trailofbits
Read GitHub content with authenticated access.
Repository management
audit-context-building
trailofbits
Know what unfamiliar code assumes before an audit.
Security auditing
sharp-edges
trailofbits
Find security traps in APIs and app settings.
Security review
variant-analysis
trailofbits
Find where else a known bug hides in your code.
Code security auditing
sarif-parsing
trailofbits
Make sense of your security scan results.
Security analysis
spec-to-code-compliance
trailofbits
Find where your code breaks its written promises.
Software auditing
semgrep-rule-creator
trailofbits
Catch unsafe code with tested Semgrep rules.
Static analysis
solana-vulnerability-scanner
trailofbits
Find security flaws in Solana program code.
Smart contract security
entry-point-analyzer
trailofbits
Map who can change your smart contracts' state.
Smart contract security
token-integration-analyzer
trailofbits
Spot security risks in your token integrations.
Smart contract security
guidelines-advisor
trailofbits
A prioritized review of your smart contracts.
Smart contract development
coverage-analysis
trailofbits
Find the code your fuzzing tests never reach.
Fuzz testing
harness-writing
trailofbits
Build reliable fuzzing harnesses for C++ and Rust.
Security testing
firebase-apk-scanner
trailofbits
Find exposed Firebase backends in Android APKs.
Mobile application security