secure-workflow-guide

secure workflow guide

trailofbits 6.2k ↓ 5.5k CC-BY-SA-4.0 updated 28d ago

Claude Code

View source ↗

What it does

Parse findings by severity
Explain each issue with file references
Recommend fixes
Help triage false positives
Upgradeability: slither-check-upgradeability (17 upgrade risks)
ERC conformance: slither-check-erc (6 common specs)
Token integration: Recommend token-integration-analyzer skill

Requirements & configuration

Token integration: Recommend token-integration-analyzer skill
Privacy: On-chain secrets, commit-reveal needs
| "Not a token, skip ERC checks" | Tokens can be integrated without obvious ERC inheritance | Check for token interactions, transfers, balances before skipping |

Derived from the skill's own SKILL.md documentation · extracted 2026-07-23

secure workflow guide

Source

Repository: https://github.com/trailofbits/skills

secure-workflow-guide FAQ

What does the secure-workflow-guide skill do?

Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeability/ERC conformance/token integration), generates visual security diagrams, helps document security properties for fuzzing/verification, and reviews manual security areas. Parse findings by severity Explain each issue with file references

What does secure-workflow-guide require?

Token integration: Recommend token-integration-analyzer skill Privacy: On-chain secrets, commit-reveal needs | "Not a token, skip ERC checks" | Tokens can be integrated without obvious ERC inheritance | Check for token interactions, transfers, balances before skipping |

How do I install secure-workflow-guide?

Run: npx -y skills add https://github.com/trailofbits/skills --skill secure-workflow-guide --agent claude-code — the source lives at github.com/trailofbits/skills.

Maintain secure-workflow-guide?

Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.

[![secure-workflow-guide on getagentictools](https://getagentictools.com/badge/skills/trailofbits-skills-secure-workflow-guide.svg)](https://getagentictools.com/skills/trailofbits-skills-secure-workflow-guide?ref=badge)

npx agentictools info skills/trailofbits-skills-secure-workflow-guide

The second line is the CLI lookup for this page — handy in READMEs and docs.