plugin

Static Analysis (Trail of Bits)

CodeQL, Semgrep and SARIF parsing skills for security bug hunting

.mdHow to install

Static analysis toolkit with CodeQL, Semgrep and SARIF parsing skills for security vulnerability detection. Part of the Trail of Bits skills marketplace (44 plugins), a Claude Code plugin marketplace that Codex can load through its Claude marketplace compatibility.

Install

  1. 1Add it in ChatGPT

    Open Plugins in the ChatGPT sidebar (web or desktop), search for “Static Analysis (Trail of Bits)” and select +. You'll be asked to sign in to any connected service on first use. Then type @ in a chat to call it.

  2. 2Or install it in Codex
    codex plugin marketplace add trailofbits/skills
codex plugin add static-analysis@trailofbits

    Start a new Codex session afterwards. You can also run /plugins inside the CLI to browse and install interactively.

Things to ask

  • “Run Semgrep on this repo and triage the findings”
  • “Write a CodeQL query for this injection pattern”
  • “Parse this SARIF file and summarize high-severity results”

Related

SuperpowersPlan, develop, and debug codeplugin · by Jesse Vincent · 294k starsCodex SecuritySecurity scanning for your codebaseplugin · by OpenAI · 7.2k starsBuild Web AppsBuild frontend-focused web apps with generated assets, browser testing, payments, and...plugin · by OpenAI · 7.2k starsGitHubTriage PRs, issues, CI, and publish flowsplugin · by OpenAI · 7.2k starsFigmaFigma design-to-code workflowsplugin · by Figma · 7.2k starsShopifyBuild and manage your storeplugin · by Shopify · 7.2k stars