audit-prep-assistant
Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tools, increases test coverage, removes dead code, ensures accessibility, and generates documentation (flowcharts, user stories, inline comments). Use when preparing your own codebase to be audited by someone else, getting a repository review-ready before an external security review, deciding what to fix before auditors start, or asking what assessors need from a project. For understanding unfamiliar code you are about to audit, use audit-context-building instead.
Install
With your agent
Install OMGSkills skill "trailofbits/skills:audit-prep-assistant" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/trailofbits/skills /tmp/skills && ln -s /tmp/skills/plugins/building-secure-contracts/skills/audit-prep-assistant ~/.claude/skills/audit-prep-assistantFrom README
Audit Prep Assistant Purpose Helps prepare for a security review using Trail of Bits' checklist. A well-prepared codebase makes the review process smoother and more effective. Use this: 1-2 weeks before your security audit --- The Preparation Process Step 1: Set Review Goals Helps define what you want from the review: Key Questions: What's the overall security level you're aiming for? What areas concern you most? Previous audit issues? Complex components? Fragile parts? What's the worst-case scenario for your project? Documents goals to share with the assessment team.
More from this repo
address-sanitizer
Builds and runs code under AddressSanitizer to catch buffer overflows, use-after-free, and other memory errors during...
aflpp
Sets up and runs AFL++ for multi-core fuzzing of C/C++ projects built with afl-clang-fast or afl-gcc-fast.
agentic-actions-auditor
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action,...