Testing Handbook Skills: Turning the Testing Handbook into an Executable AppSec Testing Workflow
testing-handbook-skills is a Code Auditing plugin in the Trail of Bits skills marketplace that structures the Testing Handbook on appsec.guide into a Skill usable by Claude Code or Codex. It includes the testing-handbook-generator meta-skill, 14 generated fuzzer, technology, and domain topics, and validation support via validate-skills.py. The article explains its positioning, generation workflow, installation commands for Claude Code and Codex, typical generation prompts, usage of uv-based validation, and considerations such as manual resolution of handbook paths, the absence of generated cross-references, and the need to provide the required tool environment yourself.
Read More# 翻译结果： security-threat-model: Let Agent perform threat modeling based on code repositories
### Official Translation: This article introduces OpenAI's curated Skill **security-threat-model**: it enumerates trust boundaries, assets, attacker capabilities and abuse paths based on repository evidence, and outputs a structured Markdown threat model. The article verifies the official workflow, reporting contract, installation and activation methods of Codex/Cursor/Claude Code (including the Trail of Bits plugin), as well as typical prompt words and usage boundaries.
Read More