Address Sanitizer
Builds and runs code under AddressSanitizer to catch buffer overflows, use-after-free, and other memory errors during fuzzing or tests. Covers -fsanitize=address builds…
Security
Trail of Bits8k
Trailmark Variant Neighborhood
trailmark-variant-neighborhood
Expands one confirmed or suspected vulnerability into a Trailmark graph neighborhood of variant candidates by finding sibling functions, shared callers and callees, common sensitive sinks, common entrypoint paths, interface implementations, override relationships, type/reference neighbors, and structurally similar nodes. Use after one issue is found to seed variant-analysis, semgrep-rule-creator, static-analysis, or manual review with graph-derived candidate locations.
Install
Run this in your project folder. It works with Claude Code, Cursor, Codex and dozens of other agents.
$ npx skills add trailofbits/skills --skill trailmark-variant-neighborhoodNeeds Node.js. Add -g to install for every project, or -a claude-code to skip the agent picker.
How to use Trailmark Variant Neighborhood
Once it's installed, Claude reads this skill on its own whenever a request matches what it's for, so you don't have to mention it by name. In Claude Code you can also run it directly by typing /trailmark-variant-neighborhood.
It contains no scripts, only instructions and reference files, so it can't run code on its own.
What the instructions cover
- 1When to Use
- 2When NOT to Use
- 3Rationalizations to Reject
- 4Workflow
- 5Stop Conditions
Section headings from the skill's SKILL.md file.
What's inside · 6 files
- SKILL.md
- agents/openai.yaml
- assets/trail-of-bits-mark.svg
- references/neighborhood-patterns.md
- references/output-format.md
- references/ranking.md
More from Trail of Bits
See all →Adjudicate Regression
Use when deciding whether source and live reproduction evidence establish a new regression or an exclusion.
SecurityTrail of Bits8k
Aflpp
Sets up and runs AFL++ for multi-core fuzzing of C/C++ projects built with afl-clang-fast or afl-gcc-fast. Covers instrumentation modes, parallel main and secondary campaigns…
SecurityTrail of Bits8k
Agentic Actions Auditor
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects…
SecurityTrail of Bits8k
More Claude skills for security
See all →Attack Tree Construction
Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.
Security
Seth Hobson42k
K8s Security Policies
Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernetes clusters, implementing…
SecuritySeth Hobson42k
Sast Configuration
Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps…
SecuritySeth Hobson42k
Secrets Management
Implement secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions. Use when handling sensitive credentials, rotating secrets…
SecuritySeth Hobson42k