vector-forge
An agent skill by trailofbits, from trailofbits/skills. Tags: analysis, crypto, generative, testing.
What it does
Mutation-driven test vector generation. Finds implementations of a cryptographic algorithm or protocol, runs mutation testing to identify escaped mutants, then generates new test vectors that deliberately exercise the uncovered code paths. Compares before/after mutation kill rates to prove vector effectiveness. Use when generating cryptographic test vectors, measuring Wycheproof coverage gaps, finding escaped mutants via mutation testing, creating cross-implementation test suites, or improving test vector coverage for crypto primitives.
Install
With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:
npx skills add trailofbits/skills --skill vector-forgeOr copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):
git clone --depth 1 https://github.com/trailofbits/skills
cp -r skills/plugins/trailmark/skills/vector-forge ~/.claude/skills/vector-forgeSafety box score
Not rated yet. A safety box score grades what a skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. Anyone can request one from this page; it is saved for everyone. How the score works.
Source
- Repository
- trailofbits/skills (all skills from this repository)
- Path
- plugins/trailmark/skills/vector-forge/SKILL.md
- Branch
- main
- Collection
- trailmark
- Updated
- 2026-09-19
Related skills
- constant-time-testing — Measures timing side channels in cryptographic implementations by running them.
- crypto-protocol-diagram — spthy) models and generates Mermaid sequenceDiagrams with cryptographic annotations.
- genotoxic — Graph-informed mutation testing triage.
- mermaid-to-proverif — pv files). pv file from a sequence diagram.
- audit-prep-assistant — Prepares codebases for security review using Trail of Bits' checklist.
- constant-time-analysis — Detects timing side-channel vulnerabilities in cryptographic code.