---
title: "Trail of Bits agent skills: all 4, with install commands"
canonical_url: https://cookiesforai.app/skills/trailofbits
last_updated: 2026-10-02T03:01:13+02:00
type: skill-owner
summary: "Trail of Bits publishes 4 agent skills listed on CookiesForAI, each with its license, install command and the date we checked it."
---

# Trail of Bits agent skills

Trail of Bits publishes 4 agent skills listed on CookiesForAI, each with its license, install command and the date we checked it.

- [Differential review](https://cookiesforai.app/skills/trailofbits/differential-review): differential-review is Trail of Bits' agent skill for security review of a pull request, commit or diff, using git history, blast radius counts and test coverage, and ending in a written markdown report.
- [Mutation testing](https://cookiesforai.app/skills/trailofbits/mutation-testing): mutation-testing is Trail of Bits' agent skill for configuring mutation testing campaigns with its mewt or muton tools, reading surviving mutants, telling equivalent mutants from real test gaps, and hunting bugs they expose.
- [Semgrep rule creator](https://cookiesforai.app/skills/trailofbits/semgrep-rule-creator): semgrep-rule-creator is Trail of Bits' agent skill for writing custom Semgrep rules that detect vulnerabilities and bug patterns, test-first, with taint mode preferred and every test required to pass.
- [Supply chain risk auditor](https://cookiesforai.app/skills/trailofbits/supply-chain-risk-auditor): supply-chain-risk-auditor is Trail of Bits' agent skill for auditing a project's npm, PyPI and Go dependencies for known advisories, abandoned upstreams, publisher concentration and install scripts, measured by bundled scripts.