Trail of Bits security skills analysis for Solidity contracts. Use for deep smart contract security review with invariant suggestions.
Scanned 9/12/2026
Install to Claude Code
Skills Directorynpx -y skills add hyperlane-xyz/hyperlane-monorepo --skill claude-tob-review --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Claude Tob Review?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/hyperlane-xyz-claude-tob-review)More formats (shields.io, HTML) on the badges page.
---
name: claude-tob-review
description: Trail of Bits security skills analysis for Solidity contracts. Use for deep smart contract security review with invariant suggestions.
---
# Trail of Bits Security Review Skill
Use this skill for deep Solidity smart contract security analysis using Trail of Bits methodologies.
## When to Use
- Reviewing new or modified Solidity contracts
- Before deploying contract upgrades
- Security audit preparation
- Finding vulnerability variants
## Instructions
Read and apply the ToB security guidelines from `.github/prompts/tob-security-skills.md` to analyze the Solidity changes.
Provide findings with severity ratings and invariant recommendations for testing.
### For PR Reviews
When reviewing a PR, deliver feedback as a **single consolidated GitHub review** using `/inline-pr-comments`. Each run produces a separate review. The skill fetches prior reviews/comments for context — avoid duplicating previously raised issues.
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!
Ultra-compressed communication mode. Cuts token usage ~75% by speaking like caveman while keeping full technical accuracy. Supports intensity levels: lite, full (default), ultra, wenyan-lite, wenyan-full, wenyan-ultra. Use when user says "caveman mode", "talk like caveman", "use caveman", "less tokens", "be brief", or invokes /caveman. Also auto-triggers when token efficiency is requested.
