Where does the generator find the handbook content?

It looks for the Trail of Bits testing-handbook repository in local directories or offers to clone it from GitHub if it isn't found during the discovery phase.

How does the two-pass generation work?

It first generates core content for all skills in parallel, then performs a second pass to establish functional cross-references and 'Related Skills' links between them.

How are the generated skills validated?

The generator includes a Python-based validation script that checks for template compliance, broken links, and successful skill activation.

What is the Testing Handbook Skill Generator?

It is a meta-skill for Claude Code that crawls the Trail of Bits Testing Handbook to create new, specific skills for security tools like Semgrep, AFL++, and libFuzzer.

Does it support GUI-based security tools?

No, it specifically excludes GUI-only tools (like Burp Suite) because Claude Code is designed for terminal-based and programmatic tool interaction.

Testing Handbook Skill Generator

Name: Testing Handbook Skill Generator
Author: fjor1025

byfjor1025

0•

보안 및 테스팅

Automates the creation of specialized security testing skills for Claude Code by analyzing the Trail of Bits Testing Handbook.

The Testing Handbook Skill Generator is a sophisticated meta-utility designed to parse the Trail of Bits Testing Handbook (appsec.guide) and transform its documentation into executable Claude Code skills. It streamlines the onboarding of security tools like Semgrep, CodeQL, and various fuzzers by mapping handbook sections to structured skill templates. By automating discovery, planning, and a unique two-pass generation process—which handles complex cross-referencing between tools and techniques—it ensures that security engineers have handbook-aligned guidance and best practices integrated directly into their AI-driven development workflows.

주요 기능

01Two-pass generation engine for accurate cross-skill referencing

020 GitHub stars

03Built-in validation and activation testing for generated skills

04Self-improving logic that updates project READMEs and relationship graphs

05Automated discovery and analysis of the appsec.guide repository

06Template-based creation for Tools, Fuzzers, Techniques, and Domains

사용 사례

01Synchronizing Claude Code capabilities with the latest Trail of Bits research

02Generating structured implementation patterns for application security tools

03Expanding a security testing skill library from established industry guides

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add fjor1025/infosec-framework testing-handbook-generator

For use in Claude.ai and ChatGPT

Download Skill