Skip to content
← Tools / Skills
Skill · .md packageTrail of Bits/10 trustVerified

secure-workflow-guide

Guides through Trail of Bits' 5-step secure development workflow.

Visit official site →

About

Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeability/ERC conformance/token integration), generates visual security diagrams, helps document security properties for fuzzing/verification, and reviews manual security areas. Use when securing a smart contract end to end rather than hunting one bug, checking a project on every check-in or before deployment, triaging a Slither report, or asking where to start on smart contract security.

What it can do

  • Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeability/ERC conformance/token integration), generates visual security diagrams, helps document security properties for fuzzing/verification, and reviews manual security areas. Use when securing a smart contract end to end rather than hunting one bug, checking a project on every check-in or before deployment, triaging a Slither report, or asking where to start on smart contract security.

Setup

  1. Install: npx skills add trailofbits/skills --all
  2. The skill auto-loads when relevant, or invoke it by name in your agent.

Prerequisites

A compatible AI coding agent (Claude Code, Cursor, etc.).

Use cases

codedesignsecurityautomation

Works with

Claude CodeAny agent (.md)

Trust score — 9/10

/10 trustVerified

Trail of Bits is a top-tier security research firm; their skills are professional-grade auditing and fuzzing playbooks used by their own engineers. Open source.

Sources

Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.