Home / Skills / secure-workflow-guide

secure-workflow-guide From the maker

trailofbits/skillsSkill

Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeability/ERC conformance/token integration), generates visual security diagrams, helps document security properties for fuzzing/verification, and reviews manual security areas. Use when securing a smart contract end to end rather than hunting one bug, checking a project on every check-in or before deployment, triaging a Slither report, or asking where to start on smart contract security.

ScannedSkillSource: GitHub
7,649 stars +148 this week Updated 16d ago License CC-BY-SA-4.0 Context ≈132 tokens always loaded
78popular

Why this score

Stars20/35
Usage (forks)8/15
Upkeep25/25
License15/15
Owner history10/10

This repo hosts 10 skills, so its 7,649 stars are split between them (about 765 each) for scoring.

Popularity score: 78/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank

Security

Scanned Oct 20, 2026 at commit 5c99c03fb8a9, with Cisco's open-source skill-scanner.

None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.

A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan

Alternatives

Other makers' add-ons that do the same job, next to this one.

NameScoreStarsContextUpdated
This onesecure-workflow-guide trailofbits/skills · Skill 78★ 7.6k≈132 always16d ago
ci-secure starslingdev/skills · Skill Both about secure and scan 57★ 40≈19 always16d ago
secure-npm-package evilmartians/agent-skills · Skill Both about secure 58★ 49≈75 always21d ago
latio-secure-supply-chain-skills latiotech/secure-supply-chain-skills · Plugin Both about secure 58★ 29not measured2mo ago
secure-sdlc-agents Kaademos/secure-sdlc-agents · Plugin Both about secure and development 51★ 14not measured3mo ago