workflow-skill-design
🔌Plugintrailofbits/skills
|Teaches design patterns for workflow-based Claude Code skills and provides a review agent for auditing existing skills
Overview
A plugin from Trail of Bits that teaches design patterns for building workflow-based Claude Code skills and provides a review agent for auditing existing skills. Part of the Trail of Bits Skills collection — a security-focused plugin marketplace.
Key Features
- Skill design patterns — Learn structured approaches to building effective workflow-based Claude Code skills
- Review agent — Built-in review agent that audits existing skills for quality and correctness
- Best practices — Guidance on structuring skills with proper workflows, error handling, and user interaction
- Part of Trail of Bits Skills — Alongside security plugins for YARA authoring, constant-time analysis, Firebase scanning, and git cleanup
Who is this for?
Skill authors and plugin developers who want to build high-quality Claude Code skills following proven design patterns. Ideal for teams creating internal skill libraries who want a review process for quality assurance.
Part of
trailofbits-skills
Installation
/plugin marketplace add trailofbits/skills/plugin install workflow-skill-design@trailofbitsMore from this repository10
A Claude Code plugin marketplace from Trail of Bits providing skills for AI-assisted security analysis, testing, and development workflows.
Runs Semgrep static analysis for security vulnerability detection and code quality enforcement, from the Trail of Bits Skills Marketplace for AI-assisted security workflows.
A Claude Code plugin marketplace from Trail of Bits providing skills for AI-assisted security analysis, testing, and development workflows.
A Claude Code plugin marketplace from Trail of Bits providing skills for AI-assisted security analysis, testing, and development workflows.
A Claude Code plugin marketplace from Trail of Bits providing skills for AI-assisted security analysis, testing, and development workflows.
Creates language variants of existing Semgrep rules with proper applicability analysis and test-driven validation
YARA-X detection rule authoring with linting and quality analysis
Property-based testing guidance for multiple languages and smart contracts
Plugin
Safely analyzes and cleans up local git branches and worktrees by categorizing them as merged, squash-merged, superseded, or active work.