Can it generate skills for GUI-based security tools?

No, the generator specifically excludes GUI-only tools like Burp Suite because Claude Code is optimized for command-line and terminal-based operations.

How does the two-pass generation process work?

The first pass generates the core content for all skills in parallel, while the second pass populates the related skills section once all sibling skills exist to ensure no broken links.

How do I validate the skills generated by this tool?

The generator includes a validation phase that runs a dedicated Python script (validate-skills.py) to check for template compliance and cross-reference integrity.

What is the primary source for the generated skills?

The skill uses the official Trail of Bits Testing Handbook (appsec.guide) repository as the source of truth for all security testing methodologies and tool configurations.

Does it support different categories of security tools?

Yes, it maps handbook sections to specific skill types, including static analysis tools, fuzzers, cryptographic domain skills, and general testing techniques.

Testing Handbook Skill Generator

Name: Testing Handbook Skill Generator
Author: sudohakan

bysudohakan

•

Security & Testing

Automates the creation of security testing skills by analyzing and transforming the Trail of Bits Testing Handbook into Claude Code capabilities.

This meta-skill acts as an automated factory for security-focused Claude Code capabilities by parsing the authoritative Trail of Bits Testing Handbook (appsec.guide). It streamlines the development of specialized skills for static analysis, fuzzing, and cryptographic testing by scanning the handbook's repository, applying domain-specific templates, and managing complex cross-references. It is an essential tool for security engineers and developers looking to integrate production-ready AppSec methodologies and tool configurations directly into their Claude Code CLI environment.

Key Features

01Automated discovery and analysis of the appsec.guide repository structure

02Automatic documentation updates and README management for generated plugins

032 GitHub stars

04Template-driven generation for tool, fuzzer, and technique-specific skills

05Built-in validation scripts to verify skill integrity and activation

06Two-pass generation system to ensure valid cross-references between skills

Use Cases

01Generating a comprehensive suite of security testing skills from the Trail of Bits handbook

02Standardizing the implementation patterns for security tools like Semgrep, CodeQL, and AFL++

03Bulk refreshing existing security skills when the underlying handbook content is updated

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add sudohakan/claude-code-dotfiles testing-handbook-generator

For use in Claude.ai and ChatGPT

Key Features

01Automated discovery and analysis of the appsec.guide repository structure

02Automatic documentation updates and README management for generated plugins

032 GitHub stars

04Template-driven generation for tool, fuzzer, and technique-specific skills

05Built-in validation scripts to verify skill integrity and activation

06Two-pass generation system to ensure valid cross-references between skills

Use Cases

01Generating a comprehensive suite of security testing skills from the Trail of Bits handbook

02Standardizing the implementation patterns for security tools like Semgrep, CodeQL, and AFL++

03Bulk refreshing existing security skills when the underlying handbook content is updated

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add sudohakan/claude-code-dotfiles testing-handbook-generator

For use in Claude.ai and ChatGPT