Skills for auditing code and the skills themselves

NVIDIA's SkillSpector scans a Git repo, URL, zip file or folder, combines static analysis with an optional LLM pass and reports to the terminal or as JSON, Markdown or SARIF.

Yes, Trail of Bits publishes its own: differential-review checks code changes for security, c-review hunts memory corruption and overflows in C/C++, and fp-check separates real bugs from false positives.

The Trail of Bits set includes vulnerability scanners for Algorand, Cairo/StarkNet and Cosmos SDK contracts, and entry-point-analyzer finds externally callable functions that change contract state.