trailofbits/skills

Build context for an unfamiliar codebase

Uses audit-context-building

• Replace <path> with the target codebase path.
• Optionally replace <module> with a module to prioritize; otherwise omit the entire optional --focus <module> portion.

/audit-context-building:audit-context <path> [--focus <module>]

Propose one strong property-based test

Uses property-based-testing

• Replace <target-path> with the file, module, or small component to review.
• Provide any relevant existing test directory or testing conventions if they are not discoverable from the project.

Check the repository for this skill’s setup.

Use the property-based-testing skill to review <target-path>. Identify one strong, non-tautological property supported by the code and sketch a focused test using the project's existing property-testing library. If the project has no such library, propose the specific property first and ask before adding a dependency.

Search narrowly for variants of a known bug

Uses variant-analysis

• Replace <codebase-path> with the repository or source-tree path.
• Replace <known-issue-location> with the file and line, function, or other precise location of an already identified bug.
• Provide the existing vulnerability or logic-bug claim and any known triggering conditions.

Check the repository for this skill’s setup.

Use the variant-analysis skill on <codebase-path> to search for variants of the known issue at <known-issue-location>. Start by stating its root cause, create an exact-match search that finds the known instance, then generalize one element at a time and triage the resulting candidates.