.NET AI and Machine Learning
Security scan passedThe .NET team's skill for picking the right AI or ML stack in .NET 8+ apps, from ML.NET to Microsoft.Extensions.AI and Agent Framework.

Turns a task into a copy-ready /goal command for Claude Code or Codex, with a checkable finish line and a stop bound.
by trailofbits· AI & agentsUnclaimed · Yours? Claim it
About
Trail of Bits' skill for goal mode. Goal mode keeps an agent working until a completion condition is met, so a vague condition can keep it looping turn after turn. Goal Prompt drafts that condition as a contract the agent can actually finish, then formats it as a single /goal line for Claude Code or Codex. What it does - Writes the goal as an end state, not an activity: what to read first, the exact command that proves it's done, what must not change, and a stop bound - Closes the easy outs, such as deleting code to silence a check, passing on a subset of tests or editing the checks themselves - Keeps the goal small, and moves long detail into a GOAL.md file that the goal points to - Never invents a missing piece: anything it can't ground in your request or your repo comes back as a "Missing:" list - Narrows security-audit goals to one validated finding at a time, under a threat-model file, following Trail of Bits' codex-config guidance How it works - Ask it to write, rewrite, tighten or clean up a goal prompt, and it returns one fenced line: /goal followed by the objective - A small Python formatter (standard library only, run with uv) puts it on one line, warns when there's no stop clause and rejects anything over the 4,000-character limit instead of cutting it short How to install it In Claude Code, run /plugin marketplace add trailofbits/skills, then install goal-prompt from /plugin menu. In Codex, run codex plugin marketplace add trailofbits/skills, then codex plugin add goal-prompt@trailofbits. Good to know - It's part of Trail of Bits' open-source skills marketplace on GitHub. - It only writes the goal. You paste the /goal line into your agent yourself.
Skills people install alongside Goal Prompt.
4 images
Once it’s added
“Turn this into a /goal command: replace legacyAuth() with auth.verify() and keep the tests passing.”
“Tighten this goal prompt so it can't loop forever.”
“Compress this goal so it fits under 4,000 characters.”
“Clean up this /goal command and tell me what's missing.”
“Write a /goal for finding and validating one high-severity bug, using our threat model file.”
“Draft a goal-mode objective for the auth migration, with a progress log.”
Before you add it
Reads only
Your request, the conversation and your repo, so the check and scope come from what's there
Makes changes · your agent can ask first
A GOAL.md for the details when a goal won't fit in 4,000 characters
From people who use it
Step by step
Nothing new reaches your agent until a person has looked at it.
Scanned on every change, and again when our rules improve.
Runs on your machine.
Runs on your machine.
Runs on your machine.
Runs on your machine.
npx -y degit trailofbits/skills/plugins/goal-prompt/skills/goal-prompt ~/.copilot/skills/goal-prompt
Runs on your machine.
npx -y degit trailofbits/skills/plugins/goal-prompt/skills/goal-prompt ~/.cursor/skills/goal-prompt
Runs on your machine.
npx -y degit trailofbits/skills/plugins/goal-prompt/skills/goal-prompt ~/.claude/skills/goal-prompt
/plugin marketplace add trailofbits/skills /plugin install goal-prompt@trailofbits
Runs on your machine.
npx -y degit trailofbits/skills/plugins/goal-prompt/skills/goal-prompt ~/.agents/skills/goal-prompt
Runs on your machine.
Runs on your machine.
npx -y degit trailofbits/skills/plugins/goal-prompt/skills/goal-prompt ~/.gemini/skills/goal-prompt
Runs on your machine.
npx -y degit trailofbits/skills/plugins/goal-prompt/skills/goal-prompt .agents/skills/goal-prompt
Runs on your machine.
npx -y degit trailofbits/skills/plugins/goal-prompt/skills/goal-prompt ~/.openclaw/skills/goal-prompt
Runs on your machine.
npx -y degit trailofbits/skills/plugins/goal-prompt/skills/goal-prompt ~/.config/opencode/skills/goal-prompt
Runs on your machine.
npx -y degit trailofbits/skills/plugins/goal-prompt/skills/goal-prompt ~/.hermes/skills/goal-prompt
Scanned and passed · checked 5 h ago
No reviews yet. Used Goal Prompt? Say how it went.
Write a reviewNobody has shared how they use Goal Prompt yet.
Security scan
Passed
Safe to install in every agent it supports. Runs in your agent, as instructions.
Skills people install alongside Goal Prompt.
The .NET team's skill for picking the right AI or ML stack in .NET 8+ apps, from ML.NET to Microsoft.Extensions.AI and Agent Framework.
Has your agent move code and prompts from Sonnet 4.x or Opus 4.1 to Claude Opus 4.5, from model strings to prompt fixes.