# audit-context-building

> Claude/Codex skill by [@trailofbits](https://omgskills.com/library/trailofbits/index.md) · 7.9k stars · Updated 2026-10-28

Understand a codebase before looking for bugs in it - what each function assumes, what it guarantees, and what it depends on elsewhere. Use when starting an audit, threat model, or architecture review on unfamiliar code, and before any vulnerability-hunting pass.

Tags: agent-skills

## Install

```sh
git clone https://github.com/trailofbits/skills /tmp/skills && ln -s /tmp/skills/plugins/audit-context-building/skills/audit-context-building ~/.claude/skills/audit-context-building
```

## From README

Audit Context Building Build understanding, not verdicts. This runs before anyone hunts for bugs, and feeds that work. When to Use At the start of an audit, a threat model, or an architecture review, when the code is unfamiliar. Also when an earlier pass produced findings nobody could judge, because no one had mapped out how the system fits together. When NOT to Use Do not name vulnerabilities, suggest fixes, write proofs-of-concept, or rate severity. Those belong to the hunting phase, which runs next and with the whole picture in hand. When the code counts on something and nothing checks it, record that plainly and move on — whether it matters is decided later. Not worth the tokens on code you already understand. Do not analyze in this context The analysis is long, and this context needs to survive to use it. Dispatch it: A codebase, or more than one function — run /audit-context-building:audit-context .

## Links

- HTML page: https://omgskills.com/library/trailofbits/skills/audit-context-building/
- GitHub: https://github.com/trailofbits/skills
- Author: [@trailofbits](https://omgskills.com/library/trailofbits/index.md)

## More from this repo

- [address-sanitizer](https://omgskills.com/library/trailofbits/skills/address-sanitizer/index.md) — Builds and runs code under AddressSanitizer to catch buffer overflows, use-after-free, and other memory errors during...
   - [@trailofbits](https://omgskills.com/library/trailofbits/index.md) · 8.1k stars
- [aflpp](https://omgskills.com/library/trailofbits/skills/aflpp/index.md) — Sets up and runs AFL++ for multi-core fuzzing of C/C++ projects built with afl-clang-fast or afl-gcc-fast.
   - [@trailofbits](https://omgskills.com/library/trailofbits/index.md) · 7.9k stars
- [agentic-actions-auditor](https://omgskills.com/library/trailofbits/skills/agentic-actions-auditor/index.md) — Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action,...
   - [@trailofbits](https://omgskills.com/library/trailofbits/index.md) · 7.9k stars