VibeRPGSimulator

Trail of Bits marketplace of security plugins for code audits, Semgrep and CodeQL, smart contracts and variant analysis.

How it works

Foe: Breach Spider, a security hole an attacker could use.

Foes

  • Breach Spider

Party · Context

  • RogueYour agent100/100

  1. Breach Spider

    The Breach Spider blocks the way.

    What really happensIt stands for a security hole an attacker could use.

    Rogue: Context 100/100.

  2. Exploit

    The spider strikes through a gap nobody guarded. Its bite lingers.

    What really happensAn attacker gets in through a hole nobody checked, and the harm spreads until it is patched.

    Rogue takes 11. Rogue: Context 89/100. Rogue: Poison.

  3. Trail of Bits Skills

    The hero opens the Trail of Bits guild chest.

    What really happensAdd the trailofbits/skills marketplace, then open /plugin menu and install only the plugins you need.

    Breach Spider takes 17.

  4. Trail of Bits Skills

    First the keep is mapped, one room at a time.

    What really happensaudit-context-building builds an understanding of the codebase function by function before any bug hunting starts.

    Breach Spider takes 14.

  5. Exploit

    The Breach Spider uses Exploit.

    Rogue takes 11. Rogue: Context 78/100.

  6. Trail of Bits Skills

    The guild's tools probe the weak joints.

    What really happensdifferential-review checks a change against git history, and static-analysis runs CodeQL and Semgrep and parses SARIF.

    Breach Spider takes 33.

  7. Trail of Bits Skills

    A false alarm is weighed before it is reported.

    What really happensfp-check runs gated reviews to rule out false positives, and variant-analysis looks for the same bug elsewhere.

    Breach Spider takes 8. Rogue: Ward.

  8. Trail of Bits Skills

    The spider's nest is found, and its kin across the realm.

    What really happensYou get findings that passed false-positive checks. Use these tools only on code you own or are authorized to audit.

    Breach Spider takes 28. Breach Spider falls.

  9. Victory

    The Breach Spider falls.

Learn this spell

Claude Code

/plugin marketplace add trailofbits/skills
/plugin menu

Codex

codex plugin marketplace add trailofbits/skills
codex plugin list
codex plugin add <plugin-name>@trailofbits

Notes

A marketplace of 46 plugins that you install one by one. Security picks include audit-context-building, differential-review, insecure-defaults, sharp-edges, static-analysis, variant-analysis, supply-chain-risk-auditor and building-secure-contracts. Codex reads the same marketplace: codex plugin marketplace add trailofbits/skills, then codex plugin add <plugin-name>@trailofbits. Some plugins are not security tools, such as let-fate-decide and culture-index. Audit only code you own or are authorized to review.

This spell has no recorded sessions in the curator's logs. Tried it? Send a spell report.