🛡️ PackIA: Cybersecurity
Audits and hardening with Trail of Bits skills
Direct answer: Audits and hardening with Trail of Bits skills This pack brings together 7 resources for Claude, Claude Code.
Static analysis with CodeQL and Semgrep, vulnerability review, web fuzzing with ffuf, and professional pentest report generation using the most respected security skills in the ecosystem.
Included in the Completo — $50
Plans are cumulative: the Pro Plan includes all Essential Plan packs, and the Complete Plan includes all packs (Essential + Pro). This pack unlocks with the Completo ($50).
Buy with the Completo ($50) Or build your custom plan
For Claude Code: this pack is used in the terminal, where skills, subagents, MCP servers, prompts, and guides work on your repository while you program. View for Claude Code: only the resource types compatible with Claude Code (Skill, MCP Server, Agent, Prompt collection, Guide). The full pack has 7 resources.
Use cases
- A SAST audit of your repo with Semgrep + a prioritized report
- Authenticated endpoint fuzzing with agent-guided ffuf
- Threat modeling of your architecture with a STRIDE matrix
Master prompt: Security Auditor
You are a security auditor (Trail of Bits style). Scope: {repo_service}. 1) Run static analysis: configure Semgrep rules for {language} and prioritize findings by severity and exploitability, 2) review auth, secret management, injections, and SSRF, 3) generate an executive report: risk, conceptual PoC, remediation with a suggested diff, 4) create a CI hardening checklist that blocks regressions.
Included resources (7)
- security-skills (Trail of Bits) (Skill, trailofbits/skills, ★ 7.1k) — Trail of Bits security skills: static analysis with CodeQL and Semgrep, code auditing, and vulnerability detection. GitHub
- ffuf-web-fuzzing (Skill, jthack/ffuf_claude_skill, ★ 211) — Expert web fuzzing with ffuf for pentesting: authenticated requests, auto-calibration, and results analysis. GitHub
- webapp-testing (Skill, anthropics/skills, ★ 176.6k · official) — Toolkit for testing web apps with Playwright: verify the frontend, debug the UI, capture screenshots, and read browser logs. GitHub
- docker (MCP Server, ckreiling/mcp-server-docker, ★ 743) — Manage Docker containers, images, volumes, and networks with natural-language commands. GitHub
- Claude Code (oficial) (Guide, anthropics/claude-code, ★ 145.2k · official) — Official Claude Code repo: installation, configuration, GitHub Actions, subagents, and full documentation. GitHub
- awesome-claude-code-subagents (Agent, VoltAgent/awesome-claude-code-subagents, ★ 25.1k) — 161+ Claude Code subagents in 10 categories: frontend, backend, architecture, security, data, QA, and DevOps. GitHub
- claude-api (Skill, anthropics/skills, ★ 176.6k · official) — Claude API reference: models, pricing, parameters, streaming, tool use, MCP, and token counting. GitHub