GitHub · By trailofbits

Walks a repository through release readiness before it goes public: secrets audit, licensing, documentation, CI and language-specific packaging.

trailofbits/skills

Statically audits GitHub Actions workflows that run AI coding agents, tracing attacker-controlled input to agent prompts and flagging unsafe sandbox, trigger and allowlist settings.

trailofbits/skills

Triage and shepherd all open PRs owned by the current GitHub user, isolating each writable worker in its own worktree.

trailofbits/coop

Triages open GitHub issues and pull requests with the gh CLI, optionally merging ready PRs, closing resolved issues with evidence and assigning local priority and size estimates.

trailofbits/skills

Enforces authenticated gh CLI workflows over unauthenticated curl, WebFetch, and MCP fetch patterns.

trailofbits/skills

Use only when the user explicitly asks to stage, commit, push, and open a GitHub pull request in one flow using the GitHub CLI (gh).

trailofbits/skills-curated

A skill your agent uses when a user asks to debug or fix failing GitHub PR checks that run in GitHub Actions; use gh to inspect checks and logs, summarize failure context, draft a fix plan, and…

trailofbits/skills-curated