building-secure-contracts plugin
Comprehensive smart contract security toolkit based on Trail of Bits' Building Secure Contracts framework. Includes vulnerability scanners for 6 blockchains and 5 development guideline assistants.
How to install the building-secure-contracts plugin
Run both commands inside Claude Code. The first adds the marketplace once; the second installs the plugin.
/plugin marketplace add trailofbits/skills
/plugin install building-secure-contracts@trailofbitsWhat's inside building-secure-contracts
11 parts read from the plugin's own files.
Skills 11
Claude loads it when the task matches- algorand-vulnerability-scanner
Scans Algorand smart contracts written in TEAL or PyTeal for 11 critical security vulnerability patterns.
- audit-prep-assistant
Prepares codebases for security reviews by running static analysis, increasing test coverage, removing dead code, and generating technical documentation.
- cairo-vulnerability-scanner
Scans Cairo smart contracts for critical security vulnerabilities including arithmetic overflows, L1-L2 messaging issues, and signature replay.
- code-maturity-assessor
Assesses smart contract and blockchain codebase maturity using a 9-category framework to produce evidence-based scorecards and improvement roadmaps.
- cosmos-vulnerability-scanner
Scans Cosmos SDK modules and CosmWasm contracts for consensus-critical vulnerabilities like chain halts, fund loss, and state divergence.
- guidelines-advisor
Analyzes smart contract codebases to provide documentation, architecture reviews, and prioritized improvement recommendations based on Trail of Bits guidelines.
- secure-workflow-guide
Guides smart contract security through a five-step process including Slither scans, feature validation, visual diagrams, and manual review.
- solana-vulnerability-scanner
Scans Solana and Anchor programs for six critical security vulnerabilities including arbitrary CPI, improper PDA validation, and missing signer checks.
- substrate-vulnerability-scanner
Scans Substrate and Polkadot pallets for seven critical security vulnerabilities including arithmetic overflows, panics, and incorrect weight calculations.
- token-integration-analyzer
Analyzes ERC20 and ERC721 token implementations and integrations for security risks, non-standard behaviors, and compliance with standards.
- ton-vulnerability-scanner
Scans FunC smart contracts on the TON blockchain for critical vulnerabilities in boolean logic, Jetton handling, and gas management.
Using building-secure-contracts in Claude Code
Skills need no command. Claude reads them when your request matches what they describe.
Update, turn off or remove
- Update the plugin (shell)
- claude plugin update building-secure-contracts@trailofbits
- Refresh the marketplace
- /plugin marketplace update trailofbits
- Turn it off for now
- /plugin disable building-secure-contracts@trailofbits
- Remove it
- /plugin uninstall building-secure-contracts@trailofbits
Skills in building-secure-contracts
- algorand-vulnerability-scannertrailofbits/skills
Scans Algorand smart contracts written in TEAL or PyTeal for 11 critical security vulnerability patterns.
4 files8.1Kstars - audit-prep-assistanttrailofbits/skills
Prepares codebases for security reviews by running static analysis, increasing test coverage, removing dead code, and generating technical documentation.
3 files8.1Kstars - cairo-vulnerability-scannertrailofbits/skills
Scans Cairo smart contracts for critical security vulnerabilities including arithmetic overflows, L1-L2 messaging issues, and signature replay.
4 files8.1Kstars - code-maturity-assessortrailofbits/skills
Assesses smart contract and blockchain codebase maturity using a 9-category framework to produce evidence-based scorecards and improvement roadmaps.
6 files8.1Kstars - cosmos-vulnerability-scannertrailofbits/skills
Scans Cosmos SDK modules and CosmWasm contracts for consensus-critical vulnerabilities like chain halts, fund loss, and state divergence.
11 files8.1Kstars - guidelines-advisortrailofbits/skills
Analyzes smart contract codebases to provide documentation, architecture reviews, and prioritized improvement recommendations based on Trail of Bits guidelines.
6 files8.1Kstars - secure-workflow-guidetrailofbits/skills
Guides smart contract security through a five-step process including Slither scans, feature validation, visual diagrams, and manual review.
5 files8.1Kstars - solana-vulnerability-scannertrailofbits/skills
Scans Solana and Anchor programs for six critical security vulnerabilities including arbitrary CPI, improper PDA validation, and missing signer checks.
4 files8.1Kstars - substrate-vulnerability-scannertrailofbits/skills
Scans Substrate and Polkadot pallets for seven critical security vulnerabilities including arithmetic overflows, panics, and incorrect weight calculations.
4 files8.1Kstars - token-integration-analyzertrailofbits/skills
Analyzes ERC20 and ERC721 token implementations and integrations for security risks, non-standard behaviors, and compliance with standards.
5 files8.1Kstars - ton-vulnerability-scannertrailofbits/skills
Scans FunC smart contracts on the TON blockchain for critical vulnerabilities in boolean logic, Jetton handling, and gas management.
4 files8.1Kstars
building-secure-contracts plugin questions
How do I install the building-secure-contracts plugin?
In Claude Code run /plugin marketplace add trailofbits/skills, then /plugin install building-secure-contracts@trailofbits.
What does the building-secure-contracts plugin include?
building-secure-contracts bundles 11 skills.
How do I update or remove the building-secure-contracts plugin?
Update it with claude plugin update building-secure-contracts@trailofbits in your shell, or from the Installed tab of /plugin. Remove it with /plugin uninstall building-secure-contracts@trailofbits.