SkillCheatSheet
patching-bugs
An AI agent skill from trailofbits/skills, scored 69 out of 100 by code.
Code score by group
It loses the most points in Description (12), the group that checks whether the description says what the skill does and when to use it.
What the author says it does
Use when a known bug or falsifiable bug hypothesis in a local codebase needs a patch commit and reviewable proof report.
This is the description in the skill's own SKILL.md, written by its author, not by SkillCheatSheet.
- Repository
- trailofbits/skills
- Folder
- plugins/patching-bugs/skills/patching-bugs
- License
- CC-BY-SA-4.0
- GitHub stars
- 8,147
- SKILL.md lines
- 153
- Other files
- 0
Add patching-bugs to your agent
npx skills add trailofbits/skills --skill patching-bugsThe command uses the open skills CLI. A skill is instructions and scripts your agent will follow, so read it first: open the folder on GitHub at the commit that was scored.
More skills from trailofbits/skills
-
cvss-scoring
Produces CVSS v4.0 vector strings from plain-text vulnerability descriptions by systematically evaluating base metrics. Use when scoring a vulnerability, generating a CVSS vector,…
Verified85A -
cosmos-vulnerability-scanner
Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence. 25 core + 16 IBC + 10 EVM + 3 CosmWas…
Verified84B -
codeql
Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "build codeql database…
Verified83B -
graph-evolution
Compares Trailmark code graphs at two source code snapshots (git commits, tags, or directories) to surface security-relevant structural changes. Detects new attack paths, complexi…
Verified82B -
post-patch-validation
Validates security patches with reproducible baseline-versus-patched evidence, including original exploits, root-cause variants, behavior preservation, regressions, and newly intr…
Verified82B -
semgrep
Runs a Semgrep security scan over a codebase: detects languages, selects rulesets, presents the plan for explicit approval, then runs every approved ruleset through scripts/run-sc…
Verified82B -
yara-rule-authoring
Guides authoring of high-quality YARA-X detection rules for malware identification. Use when writing, reviewing, or optimizing YARA rules. Covers naming conventions, string select…
Verified81B -
crypto-protocol-diagram
Extracts protocol message flow from source code, RFCs, academic papers, pseudocode, informal prose, ProVerif (.pv), or Tamarin (.spthy) models and generates Mermaid sequenceDiagra…
Verified80B
All skills in trailofbits/skills
Scores come from a snapshot of 300 public GitHub repositories taken on 12 November 2026. Every score is the result of fixed checks run by code; no AI is involved. How scoring works.