Testing Handbook Skills
Security scan passedTrail of Bits' skills for fuzzing and crypto testing, from its Testing Handbook: libFuzzer, AFL++, cargo-fuzz, Atheris, OSS-Fuzz and more.
Generates an x-ray.md pre-audit report covering overview, enhanced threat model (protocol-type profiling, git-weighted…
Part of Pashov Audit Group SkillsPack · 5 skills
by pashov· SecurityUnclaimed · Yours? Claim it
About
Generates an x-ray.md pre-audit report covering overview, enhanced threat model (protocol-type profiling, git-weighted attack surfaces, temporal risk analysis, composability dependency mapping), invariants, integrations, docs quality, test analysis, and developer/git history. Triggers on 'x-ray', 'audit readiness', 'readiness report', 'pre-audit report', 'prep this protocol', 'protocol prep', 'summarize this protocol'.
Skills people install alongside x-ray.
Runs on your machine.
Runs on your machine.
Runs on your machine.
Runs on your machine.
npx -y degit pashov/skills/x-ray ~/.copilot/skills/x-ray
Runs on your machine.
npx -y degit pashov/skills/x-ray ~/.cursor/skills/x-ray
Runs on your machine.
npx -y degit pashov/skills/x-ray ~/.claude/skills/x-ray
Runs on your machine.
npx -y degit pashov/skills/x-ray ~/.agents/skills/x-ray
Runs on your machine.
Runs on your machine.
npx -y degit pashov/skills/x-ray ~/.gemini/skills/x-ray
Runs on your machine.
npx -y degit pashov/skills/x-ray .agents/skills/x-ray
Runs on your machine.
npx -y degit pashov/skills/x-ray ~/.openclaw/skills/x-ray
Runs on your machine.
npx -y degit pashov/skills/x-ray ~/.config/opencode/skills/x-ray
Runs on your machine.
npx -y degit pashov/skills/x-ray ~/.hermes/skills/x-ray
Scanned and passed · checked 3 h ago
From people who use it
Step by step
Nothing new reaches your agent until a person has looked at it.
Scanned on every change, and again when our rules improve.
No reviews yet. Used x-ray? Say how it went.
Write a reviewNobody has shared how they use x-ray yet.
Security scan
Passed
Safe to install in every agent it supports. Runs in your agent, as instructions.
Skills people install alongside x-ray.
Trail of Bits' skills for fuzzing and crypto testing, from its Testing Handbook: libFuzzer, AFL++, cargo-fuzz, Atheris, OSS-Fuzz and more.
Lets your agent find vulnerabilities in your code, prove they're real against your running app, and fix them: SCA, secrets, SAST and DAST.
Has your agent diff two Windows builds with WinDiff and explain what changed in syscalls, symbols and mitigations, and why it matters.