# audit-prep-assistant

> Claude/Codex skill by [@trailofbits](https://omgskills.com/library/trailofbits/index.md) · 7.9k stars · Updated 2026-10-28

Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tools, increases test coverage, removes dead code, ensures accessibility, and generates documentation (flowcharts, user stories, inline comments). Use when preparing your own codebase to be audited by someone else, getting a repository review-ready before an external security review, deciding what to fix before auditors start, or asking what assessors need from a project. For understanding unfamiliar code you are about to audit, use audit-context-building instead.

Tags: agent-skills

## Install

```sh
git clone https://github.com/trailofbits/skills /tmp/skills && ln -s /tmp/skills/plugins/building-secure-contracts/skills/audit-prep-assistant ~/.claude/skills/audit-prep-assistant
```

## From README

Audit Prep Assistant Purpose Helps prepare for a security review using Trail of Bits' checklist. A well-prepared codebase makes the review process smoother and more effective. Use this: 1-2 weeks before your security audit --- The Preparation Process Step 1: Set Review Goals Helps define what you want from the review: Key Questions: What's the overall security level you're aiming for? What areas concern you most? Previous audit issues? Complex components? Fragile parts? What's the worst-case scenario for your project? Documents goals to share with the assessment team.

## Links

- HTML page: https://omgskills.com/library/trailofbits/skills/audit-prep-assistant/
- GitHub: https://github.com/trailofbits/skills
- Author: [@trailofbits](https://omgskills.com/library/trailofbits/index.md)

## More from this repo

- [address-sanitizer](https://omgskills.com/library/trailofbits/skills/address-sanitizer/index.md) — Builds and runs code under AddressSanitizer to catch buffer overflows, use-after-free, and other memory errors during...
   - [@trailofbits](https://omgskills.com/library/trailofbits/index.md) · 8.1k stars
- [aflpp](https://omgskills.com/library/trailofbits/skills/aflpp/index.md) — Sets up and runs AFL++ for multi-core fuzzing of C/C++ projects built with afl-clang-fast or afl-gcc-fast.
   - [@trailofbits](https://omgskills.com/library/trailofbits/index.md) · 7.9k stars
- [agentic-actions-auditor](https://omgskills.com/library/trailofbits/skills/agentic-actions-auditor/index.md) — Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action,...
   - [@trailofbits](https://omgskills.com/library/trailofbits/index.md) · 7.9k stars