testing-handbook-generator
An agent skill by trailofbits, from trailofbits/skills. Tags: documentation, generative, training.
What it does
Generates Claude Code skills from the Trail of Bits Testing Handbook (appsec.guide), analyzing handbook pages and emitting SKILL.md files with the structure each skill type requires. Use when creating or refreshing a skill from handbook content, or when the user names the testing handbook or appsec.guide. Not for answering security testing questions — the generated skills cover those.
Install
With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:
npx skills add trailofbits/skills --skill testing-handbook-generator
Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):
git clone --depth 1 https://github.com/trailofbits/skills
cp -r skills/plugins/testing-handbook-skills/skills/testing-handbook-generator ~/.claude/skills/testing-handbook-generator
Safety box score
Not rated yet. A safety box score grades what a skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. Anyone can request one from this page; it is saved for everyone. How the score works.
Source
- Repository
- trailofbits/skills (all skills from this repository)
- Path
- plugins/testing-handbook-skills/skills/testing-handbook-generator/SKILL.md
- Branch
- main
- Collection
- testing-handbook-skills
- Updated
- 2026-09-19
Related skills
- mermaid-to-proverif — pv files). pv file from a sequence diagram.
- cli-demo-generator — Generates professional animated CLI demos as GIFs using VHS terminal recordings.
- fine-tuning-expert — Use when fine-tuning LLMs, training custom models, or adapting foundation models for specific tasks.
- prompt-engineer — Writes, refactors, and evaluates prompts for LLMs — generating optimized prompt templates, structured output schemas, evaluation rubrics, and test suites.
- prompt-optimizer — Transform vague prompts into precise, well-structured specifications using EARS (Easy Approach to Requirements Syntax) methodology.
- teams-channel-post-writer — Creates educational Teams channel posts for internal knowledge sharing about Claude Code features, tools, and best practices.