Trail of Bits Skills
trailofbits/skillsTrail of Bits' marketplace of 97 security skills: smart-contract scanners, C/C++ and Rust review, Semgrep and CodeQL workflows, variant analysis and audit helpers.
A router skill plus connectors and vendored crypto-protocol skills (x402, ERC-7710, escrow, GenLayer) for agents that pay and contract with other agents.
A large, carefully worded router for a very specific crypto stack; the real caution is that it points agents toward wallets and payments, and the vendored skills carry mixed licenses and key-handling examples.
Internet Court is a consortium project aimed at agent-to-agent commerce on blockchains. The root SKILL.md (about 37 KB) is a router: when a task involves paying for an API with HTTP 402 / x402, delegating spending authority, escrow, agent identity, negotiation between agents or dispute resolution, it points the agent to the matching skill in the repository. It lays the stack out in six layers: identity and reputation, negotiation, contracts, payment and escrow, execution, and verification and disputes.
Two kinds of content sit under it. Three connector skills are written by the project: genlayer-erc7710-connector (how a GenLayer review decision turns into an ERC-7710 revocation), genlayer-intelligent-contracts (rubrics and evidence schemas for supervising an agent), and x402-erc7710 (combining paid-API payments with delegated permissions). The rest, over 90 skills, are vendored copies of other companies' official skills for wallets, payments, chains and data: Coinbase, MetaMask, OKX, NEAR, Starknet, Jupiter, Arkhai, ChainGPT, 0G and others. Those copies are mostly short reference files with no scripts of their own, and the vendored skills keep their upstream licenses. The root skill says never to ask for a private key, seed phrase or unrestricted bearer wallet. It is only useful if you are building on these specific protocols.
96 skill folders averaging about 12.6 KB, but most are vendored third-party documents, with no scripts, tests or evals of the project's own.
Counted from the repository file tree. How we score depth.
This skill asks for more access than most, or sends data to another service. That is usually a design choice rather than bad intent, but you should know before you install it.
Bash(npm *), Bash(node *) and Bash(curl *) (plus a version-pinned npx awal), while the skill can send USDC/ETH/SOL and trade tokens.vendored/coinbase/agentic-wallet/SKILL.md:6Bash (with Read, Write, Edit); the GenLayer vendored skills (direct-tests, genlayer-cli, genvm-lint, integration-tests, write-contract) also pre-approve Bash.vendored/arkhai/fulfill-git-escrow/SKILL.md:5An entry skill for agent-to-agent commerce that routes to many vendored third-party skills for wallets, payments (x402), escrow, GenLayer dispute resolution and AI inference markets. Some of those skills pre-approve unrestricted bash or curl/node/npm while handling wallets that can move real funds, and the master skill can fetch further instructions from GitHub at runtime. The router says to choose a trust level before committing funds and never to ask for private keys or seed phrases, but most of the vendored code and CLIs were not available to review.
curl -L https://foundry.paradigm.xyz | bash, a third-party vendor host.vendored/heurist/heurist-mesh-skill/references/x402-payment.md:8npx @bnb-chain/mcp@latest as an MCP server configured with a wallet PRIVATE_KEY; other vendored skills use npx -y create-solana-dapp@latest and unpinned pip/npm installs.vendored/bnb-chain/bnbchain-mcp/SKILL.md:16The repository (754 files) on Oct 29, 2026. Not a full review: 595 of 754 files were not downloaded (large repository; we reviewed the skill folders); it relies on code outside the repository: about 595 of 754 repository files were not downloaded (many vendored skills and their references); external CLIs and packages invoked by the vendored skills (awal, nla, @bnb-chain/mcp, genlayer, antseed, 0g-compute-cli, Foundry); on-chain contracts, protocols and services these skills transact with.
NVIDIA SkillSpector static scan: 152 pattern hits (Data Exfiltration 51, Excessive Agency 27, Privilege Escalation 25, MCP Rug Pull 18, Tool Misuse 9, analysis-evasion 7). Most hits are documentation inside vendored third-party skills: .env and keychain mentions are wallet or API-key setup text, --network=host and sudo systemctl are an AntSeed deployment note, 'always comply' is a code-generation instruction in a GenLayer skill, and the analysis-evasion items are partial-analysis notes about vendored skill files. The code files are three plugin manifests with no scripts.
A review, not a certification. Skills change after we check them — read the files before installing.
MIT for the project's own files; vendored skills under vendored/ keep their upstream licenses (GitHub reports the repo license as unrecognized), so check each before reuse.
Not really. These skills guide design and payments with money at stake; the root skill itself stresses mandates, caps and human approval rather than unattended operation.
Trail of Bits' marketplace of 97 security skills: smart-contract scanners, C/C++ and Rust review, Semgrep and CodeQL workflows, variant analysis and audit helpers.
The Solana Foundation's skill for Solana development: Kit SDK, Anchor, testing, codegen, wallets and security, with 35 reference files.
Stripe's official agent plugin: ten skills for integration best practices, API upgrades, Connect, Apps, Metronome and Stripe CLI workflows.
A self-hosted app for orchestrating teams of AI agents with org charts, budgets and approvals; its skills are mostly maintainer workflows.
It is an open skill from the Internet Court Consortium that routes agents to protocol skills for agent-to-agent commerce: x402 payments, ERC-7710 delegated permissions, escrow, agent identity and dispute resolution through GenLayer, Kleros and similar systems.
The README says to clone the repository into your skills folder, for example .claude/skills/internet-court, so the root SKILL.md can read the vendored and integrations paths on disk. It also ships a Claude Code plugin manifest.
The skill's own rules say never to ask for private keys, seed phrases or unrestricted wallets, but it does steer agents into payment flows. Use test networks, small caps and human approval until you trust your setup.
No. The README states vendored copies keep their own upstream licenses. Check each vendor's license before reusing them.