From 785ee024ce5f371023ef55680bfdccc028685bca Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 18 Sep 2026 13:03:59 +0000 Subject: [PATCH 1/4] chore(deps): update trailofbits/skills digest to 123037e --- skills/agentic-actions-auditor/spec.yaml | 2 +- skills/codeql/spec.yaml | 2 +- skills/constant-time-analysis/spec.yaml | 2 +- skills/differential-review/spec.yaml | 2 +- skills/fp-check/spec.yaml | 2 +- skills/property-based-testing/spec.yaml | 2 +- skills/sarif-parsing/spec.yaml | 2 +- skills/semgrep-rule-creator/spec.yaml | 2 +- skills/semgrep-rule-variant-creator/spec.yaml | 2 +- skills/semgrep/spec.yaml | 2 +- skills/sharp-edges/spec.yaml | 2 +- skills/supply-chain-risk-auditor/spec.yaml | 2 +- skills/variant-analysis/spec.yaml | 2 +- skills/yara-rule-authoring/spec.yaml | 2 +- skills/zeroize-audit/spec.yaml | 2 +- 15 files changed, 15 insertions(+), 15 deletions(-) diff --git a/skills/agentic-actions-auditor/spec.yaml b/skills/agentic-actions-auditor/spec.yaml index 8a814118..529b6800 100644 --- a/skills/agentic-actions-auditor/spec.yaml +++ b/skills/agentic-actions-auditor/spec.yaml @@ -9,7 +9,7 @@ metadata: spec: repository: "https://github.com/trailofbits/skills" - ref: "7b9bd5f950f89a9ba71b249b9801c1a95be3928e" + ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" path: "plugins/agentic-actions-auditor/skills/agentic-actions-auditor" version: "0.2.2" diff --git a/skills/codeql/spec.yaml b/skills/codeql/spec.yaml index 01a9e0d9..771f7318 100644 --- a/skills/codeql/spec.yaml +++ b/skills/codeql/spec.yaml @@ -9,7 +9,7 @@ metadata: spec: repository: "https://github.com/trailofbits/skills" - ref: "7b9bd5f950f89a9ba71b249b9801c1a95be3928e" + ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" path: "plugins/static-analysis/skills/codeql" version: "0.2.2" diff --git a/skills/constant-time-analysis/spec.yaml b/skills/constant-time-analysis/spec.yaml index a197ae69..18045b7b 100644 --- a/skills/constant-time-analysis/spec.yaml +++ b/skills/constant-time-analysis/spec.yaml @@ -9,7 +9,7 @@ metadata: spec: repository: "https://github.com/trailofbits/skills" - ref: "7b9bd5f950f89a9ba71b249b9801c1a95be3928e" + ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" path: "plugins/constant-time-analysis/skills/constant-time-analysis" version: "0.3.0" diff --git a/skills/differential-review/spec.yaml b/skills/differential-review/spec.yaml index 70c07867..0c7829be 100644 --- a/skills/differential-review/spec.yaml +++ b/skills/differential-review/spec.yaml @@ -9,7 +9,7 @@ metadata: spec: repository: "https://github.com/trailofbits/skills" - ref: "7b9bd5f950f89a9ba71b249b9801c1a95be3928e" # main as of 2026-04-17 + ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" # main as of 2026-04-17 path: "plugins/differential-review/skills/differential-review" version: "0.2.1" diff --git a/skills/fp-check/spec.yaml b/skills/fp-check/spec.yaml index af78f1ef..5f8f92bc 100644 --- a/skills/fp-check/spec.yaml +++ b/skills/fp-check/spec.yaml @@ -9,7 +9,7 @@ metadata: spec: repository: "https://github.com/trailofbits/skills" - ref: "7b9bd5f950f89a9ba71b249b9801c1a95be3928e" # main as of 2026-04-17 + ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" # main as of 2026-04-17 path: "plugins/fp-check/skills/fp-check" version: "0.2.1" diff --git a/skills/property-based-testing/spec.yaml b/skills/property-based-testing/spec.yaml index 5d84dd35..06efd499 100644 --- a/skills/property-based-testing/spec.yaml +++ b/skills/property-based-testing/spec.yaml @@ -9,7 +9,7 @@ metadata: spec: repository: "https://github.com/trailofbits/skills" - ref: "7b9bd5f950f89a9ba71b249b9801c1a95be3928e" # main as of 2026-04-17 + ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" # main as of 2026-04-17 path: "plugins/property-based-testing/skills/property-based-testing" version: "0.2.1" diff --git a/skills/sarif-parsing/spec.yaml b/skills/sarif-parsing/spec.yaml index 2ddb73c9..b48e3899 100644 --- a/skills/sarif-parsing/spec.yaml +++ b/skills/sarif-parsing/spec.yaml @@ -9,7 +9,7 @@ metadata: spec: repository: "https://github.com/trailofbits/skills" - ref: "7b9bd5f950f89a9ba71b249b9801c1a95be3928e" # main as of 2026-04-17 + ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" # main as of 2026-04-17 path: "plugins/static-analysis/skills/sarif-parsing" version: "0.2.1" diff --git a/skills/semgrep-rule-creator/spec.yaml b/skills/semgrep-rule-creator/spec.yaml index 5b28e1d4..6fecb715 100644 --- a/skills/semgrep-rule-creator/spec.yaml +++ b/skills/semgrep-rule-creator/spec.yaml @@ -9,7 +9,7 @@ metadata: spec: repository: "https://github.com/trailofbits/skills" - ref: "7b9bd5f950f89a9ba71b249b9801c1a95be3928e" + ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" path: "plugins/semgrep-rule-creator/skills/semgrep-rule-creator" version: "0.2.2" diff --git a/skills/semgrep-rule-variant-creator/spec.yaml b/skills/semgrep-rule-variant-creator/spec.yaml index 04da567c..2d126ddc 100644 --- a/skills/semgrep-rule-variant-creator/spec.yaml +++ b/skills/semgrep-rule-variant-creator/spec.yaml @@ -9,7 +9,7 @@ metadata: spec: repository: "https://github.com/trailofbits/skills" - ref: "7b9bd5f950f89a9ba71b249b9801c1a95be3928e" # main as of 2026-04-17 + ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" # main as of 2026-04-17 path: "plugins/semgrep-rule-variant-creator/skills/semgrep-rule-variant-creator" version: "0.3.0" diff --git a/skills/semgrep/spec.yaml b/skills/semgrep/spec.yaml index 1d59d974..134d9ad7 100644 --- a/skills/semgrep/spec.yaml +++ b/skills/semgrep/spec.yaml @@ -9,7 +9,7 @@ metadata: spec: repository: "https://github.com/trailofbits/skills" - ref: "7b9bd5f950f89a9ba71b249b9801c1a95be3928e" # main as of 2026-04-17 + ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" # main as of 2026-04-17 path: "plugins/static-analysis/skills/semgrep" version: "0.2.1" diff --git a/skills/sharp-edges/spec.yaml b/skills/sharp-edges/spec.yaml index 2a15e7bd..0f383dbe 100644 --- a/skills/sharp-edges/spec.yaml +++ b/skills/sharp-edges/spec.yaml @@ -9,7 +9,7 @@ metadata: spec: repository: "https://github.com/trailofbits/skills" - ref: "7b9bd5f950f89a9ba71b249b9801c1a95be3928e" + ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" path: "plugins/sharp-edges/skills/sharp-edges" version: "0.2.2" diff --git a/skills/supply-chain-risk-auditor/spec.yaml b/skills/supply-chain-risk-auditor/spec.yaml index a5a839eb..116b1260 100644 --- a/skills/supply-chain-risk-auditor/spec.yaml +++ b/skills/supply-chain-risk-auditor/spec.yaml @@ -9,7 +9,7 @@ metadata: spec: repository: "https://github.com/trailofbits/skills" - ref: "7b9bd5f950f89a9ba71b249b9801c1a95be3928e" # main as of 2026-04-17 + ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" # main as of 2026-04-17 path: "plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditor" version: "0.2.1" diff --git a/skills/variant-analysis/spec.yaml b/skills/variant-analysis/spec.yaml index 79309480..0447551c 100644 --- a/skills/variant-analysis/spec.yaml +++ b/skills/variant-analysis/spec.yaml @@ -9,7 +9,7 @@ metadata: spec: repository: "https://github.com/trailofbits/skills" - ref: "7b9bd5f950f89a9ba71b249b9801c1a95be3928e" # main as of 2026-04-17 + ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" # main as of 2026-04-17 path: "plugins/variant-analysis/skills/variant-analysis" version: "0.2.1" diff --git a/skills/yara-rule-authoring/spec.yaml b/skills/yara-rule-authoring/spec.yaml index ddd6d009..a3e2654a 100644 --- a/skills/yara-rule-authoring/spec.yaml +++ b/skills/yara-rule-authoring/spec.yaml @@ -9,7 +9,7 @@ metadata: spec: repository: "https://github.com/trailofbits/skills" - ref: "7b9bd5f950f89a9ba71b249b9801c1a95be3928e" + ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" path: "plugins/yara-authoring/skills/yara-rule-authoring" version: "0.2.2" diff --git a/skills/zeroize-audit/spec.yaml b/skills/zeroize-audit/spec.yaml index e68b810c..74efdd8e 100644 --- a/skills/zeroize-audit/spec.yaml +++ b/skills/zeroize-audit/spec.yaml @@ -9,7 +9,7 @@ metadata: spec: repository: "https://github.com/trailofbits/skills" - ref: "7b9bd5f950f89a9ba71b249b9801c1a95be3928e" # main as of 2026-04-17 + ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" # main as of 2026-04-17 path: "plugins/zeroize-audit/skills/zeroize-audit" version: "0.2.1" From 6add526eede0ea8ee9b9839ca08b2bb098d8388e Mon Sep 17 00:00:00 2001 From: "toolhive-release-app[bot]" <280093410+toolhive-release-app[bot]@users.noreply.github.com> Date: Fri, 18 Sep 2026 13:04:43 +0000 Subject: [PATCH 2/4] chore(skills): bump spec.version for agentic-actions-auditor,codeql,constant-time-analysis,differential-review,fp-check,property-based-testing,sarif-parsing,semgrep,semgrep-rule-creator,semgrep-rule-variant-creator,sharp-edges,supply-chain-risk-auditor,variant-analysis,yara-rule-authoring,zeroize-audit --- skills/agentic-actions-auditor/spec.yaml | 2 +- skills/codeql/spec.yaml | 2 +- skills/constant-time-analysis/spec.yaml | 2 +- skills/differential-review/spec.yaml | 2 +- skills/fp-check/spec.yaml | 2 +- skills/property-based-testing/spec.yaml | 2 +- skills/sarif-parsing/spec.yaml | 2 +- skills/semgrep-rule-creator/spec.yaml | 2 +- skills/semgrep-rule-variant-creator/spec.yaml | 2 +- skills/semgrep/spec.yaml | 2 +- skills/sharp-edges/spec.yaml | 2 +- skills/supply-chain-risk-auditor/spec.yaml | 2 +- skills/variant-analysis/spec.yaml | 2 +- skills/yara-rule-authoring/spec.yaml | 2 +- skills/zeroize-audit/spec.yaml | 2 +- 15 files changed, 15 insertions(+), 15 deletions(-) diff --git a/skills/agentic-actions-auditor/spec.yaml b/skills/agentic-actions-auditor/spec.yaml index 529b6800..9a0d996a 100644 --- a/skills/agentic-actions-auditor/spec.yaml +++ b/skills/agentic-actions-auditor/spec.yaml @@ -11,7 +11,7 @@ spec: repository: "https://github.com/trailofbits/skills" ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" path: "plugins/agentic-actions-auditor/skills/agentic-actions-auditor" - version: "0.2.2" + version: "0.3.0" provenance: repository_uri: "https://github.com/trailofbits/skills" diff --git a/skills/codeql/spec.yaml b/skills/codeql/spec.yaml index 771f7318..c73b1ce7 100644 --- a/skills/codeql/spec.yaml +++ b/skills/codeql/spec.yaml @@ -11,7 +11,7 @@ spec: repository: "https://github.com/trailofbits/skills" ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" path: "plugins/static-analysis/skills/codeql" - version: "0.2.2" + version: "0.2.3" provenance: repository_uri: "https://github.com/trailofbits/skills" diff --git a/skills/constant-time-analysis/spec.yaml b/skills/constant-time-analysis/spec.yaml index 18045b7b..6f1d9e53 100644 --- a/skills/constant-time-analysis/spec.yaml +++ b/skills/constant-time-analysis/spec.yaml @@ -11,7 +11,7 @@ spec: repository: "https://github.com/trailofbits/skills" ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" path: "plugins/constant-time-analysis/skills/constant-time-analysis" - version: "0.3.0" + version: "0.3.1" provenance: repository_uri: "https://github.com/trailofbits/skills" diff --git a/skills/differential-review/spec.yaml b/skills/differential-review/spec.yaml index 0c7829be..24bbcdb1 100644 --- a/skills/differential-review/spec.yaml +++ b/skills/differential-review/spec.yaml @@ -11,7 +11,7 @@ spec: repository: "https://github.com/trailofbits/skills" ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" # main as of 2026-04-17 path: "plugins/differential-review/skills/differential-review" - version: "0.2.1" + version: "0.2.2" provenance: repository_uri: "https://github.com/trailofbits/skills" diff --git a/skills/fp-check/spec.yaml b/skills/fp-check/spec.yaml index 5f8f92bc..379e13b4 100644 --- a/skills/fp-check/spec.yaml +++ b/skills/fp-check/spec.yaml @@ -11,7 +11,7 @@ spec: repository: "https://github.com/trailofbits/skills" ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" # main as of 2026-04-17 path: "plugins/fp-check/skills/fp-check" - version: "0.2.1" + version: "0.2.2" provenance: repository_uri: "https://github.com/trailofbits/skills" diff --git a/skills/property-based-testing/spec.yaml b/skills/property-based-testing/spec.yaml index 06efd499..95ceea08 100644 --- a/skills/property-based-testing/spec.yaml +++ b/skills/property-based-testing/spec.yaml @@ -11,7 +11,7 @@ spec: repository: "https://github.com/trailofbits/skills" ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" # main as of 2026-04-17 path: "plugins/property-based-testing/skills/property-based-testing" - version: "0.2.1" + version: "0.2.2" provenance: repository_uri: "https://github.com/trailofbits/skills" diff --git a/skills/sarif-parsing/spec.yaml b/skills/sarif-parsing/spec.yaml index b48e3899..02a1e886 100644 --- a/skills/sarif-parsing/spec.yaml +++ b/skills/sarif-parsing/spec.yaml @@ -11,7 +11,7 @@ spec: repository: "https://github.com/trailofbits/skills" ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" # main as of 2026-04-17 path: "plugins/static-analysis/skills/sarif-parsing" - version: "0.2.1" + version: "0.2.2" provenance: repository_uri: "https://github.com/trailofbits/skills" diff --git a/skills/semgrep-rule-creator/spec.yaml b/skills/semgrep-rule-creator/spec.yaml index 6fecb715..788e5ace 100644 --- a/skills/semgrep-rule-creator/spec.yaml +++ b/skills/semgrep-rule-creator/spec.yaml @@ -11,7 +11,7 @@ spec: repository: "https://github.com/trailofbits/skills" ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" path: "plugins/semgrep-rule-creator/skills/semgrep-rule-creator" - version: "0.2.2" + version: "0.2.3" provenance: repository_uri: "https://github.com/trailofbits/skills" diff --git a/skills/semgrep-rule-variant-creator/spec.yaml b/skills/semgrep-rule-variant-creator/spec.yaml index 2d126ddc..dd9b0872 100644 --- a/skills/semgrep-rule-variant-creator/spec.yaml +++ b/skills/semgrep-rule-variant-creator/spec.yaml @@ -11,7 +11,7 @@ spec: repository: "https://github.com/trailofbits/skills" ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" # main as of 2026-04-17 path: "plugins/semgrep-rule-variant-creator/skills/semgrep-rule-variant-creator" - version: "0.3.0" + version: "0.3.1" provenance: repository_uri: "https://github.com/trailofbits/skills" diff --git a/skills/semgrep/spec.yaml b/skills/semgrep/spec.yaml index 134d9ad7..ef629184 100644 --- a/skills/semgrep/spec.yaml +++ b/skills/semgrep/spec.yaml @@ -11,7 +11,7 @@ spec: repository: "https://github.com/trailofbits/skills" ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" # main as of 2026-04-17 path: "plugins/static-analysis/skills/semgrep" - version: "0.2.1" + version: "0.2.2" provenance: repository_uri: "https://github.com/trailofbits/skills" diff --git a/skills/sharp-edges/spec.yaml b/skills/sharp-edges/spec.yaml index 0f383dbe..43398c32 100644 --- a/skills/sharp-edges/spec.yaml +++ b/skills/sharp-edges/spec.yaml @@ -11,7 +11,7 @@ spec: repository: "https://github.com/trailofbits/skills" ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" path: "plugins/sharp-edges/skills/sharp-edges" - version: "0.2.2" + version: "0.2.3" provenance: repository_uri: "https://github.com/trailofbits/skills" diff --git a/skills/supply-chain-risk-auditor/spec.yaml b/skills/supply-chain-risk-auditor/spec.yaml index 116b1260..4a6b3569 100644 --- a/skills/supply-chain-risk-auditor/spec.yaml +++ b/skills/supply-chain-risk-auditor/spec.yaml @@ -11,7 +11,7 @@ spec: repository: "https://github.com/trailofbits/skills" ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" # main as of 2026-04-17 path: "plugins/supply-chain-risk-auditor/skills/supply-chain-risk-auditor" - version: "0.2.1" + version: "0.2.2" provenance: repository_uri: "https://github.com/trailofbits/skills" diff --git a/skills/variant-analysis/spec.yaml b/skills/variant-analysis/spec.yaml index 0447551c..e9c72452 100644 --- a/skills/variant-analysis/spec.yaml +++ b/skills/variant-analysis/spec.yaml @@ -11,7 +11,7 @@ spec: repository: "https://github.com/trailofbits/skills" ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" # main as of 2026-04-17 path: "plugins/variant-analysis/skills/variant-analysis" - version: "0.2.1" + version: "0.2.2" provenance: repository_uri: "https://github.com/trailofbits/skills" diff --git a/skills/yara-rule-authoring/spec.yaml b/skills/yara-rule-authoring/spec.yaml index a3e2654a..7d704fb7 100644 --- a/skills/yara-rule-authoring/spec.yaml +++ b/skills/yara-rule-authoring/spec.yaml @@ -11,7 +11,7 @@ spec: repository: "https://github.com/trailofbits/skills" ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" path: "plugins/yara-authoring/skills/yara-rule-authoring" - version: "0.2.2" + version: "0.2.3" provenance: repository_uri: "https://github.com/trailofbits/skills" diff --git a/skills/zeroize-audit/spec.yaml b/skills/zeroize-audit/spec.yaml index 74efdd8e..865c680a 100644 --- a/skills/zeroize-audit/spec.yaml +++ b/skills/zeroize-audit/spec.yaml @@ -11,7 +11,7 @@ spec: repository: "https://github.com/trailofbits/skills" ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" # main as of 2026-04-17 path: "plugins/zeroize-audit/skills/zeroize-audit" - version: "0.2.1" + version: "0.2.2" provenance: repository_uri: "https://github.com/trailofbits/skills" From 22bc2cb8dc862195d7f629964e907c75a5f865d1 Mon Sep 17 00:00:00 2001 From: Dan Barr Date: Fri, 18 Sep 2026 13:23:49 -0400 Subject: [PATCH 3/4] Defer two Trail of Bits skill updates Signed-off-by: Dan Barr --- skills/constant-time-analysis/spec.yaml | 4 ++-- skills/zeroize-audit/spec.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/skills/constant-time-analysis/spec.yaml b/skills/constant-time-analysis/spec.yaml index 6f1d9e53..a197ae69 100644 --- a/skills/constant-time-analysis/spec.yaml +++ b/skills/constant-time-analysis/spec.yaml @@ -9,9 +9,9 @@ metadata: spec: repository: "https://github.com/trailofbits/skills" - ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" + ref: "7b9bd5f950f89a9ba71b249b9801c1a95be3928e" path: "plugins/constant-time-analysis/skills/constant-time-analysis" - version: "0.3.1" + version: "0.3.0" provenance: repository_uri: "https://github.com/trailofbits/skills" diff --git a/skills/zeroize-audit/spec.yaml b/skills/zeroize-audit/spec.yaml index 865c680a..e68b810c 100644 --- a/skills/zeroize-audit/spec.yaml +++ b/skills/zeroize-audit/spec.yaml @@ -9,9 +9,9 @@ metadata: spec: repository: "https://github.com/trailofbits/skills" - ref: "123037ec8aed26f0d86327cc39137ee5043e5deb" # main as of 2026-04-17 + ref: "7b9bd5f950f89a9ba71b249b9801c1a95be3928e" # main as of 2026-04-17 path: "plugins/zeroize-audit/skills/zeroize-audit" - version: "0.2.2" + version: "0.2.1" provenance: repository_uri: "https://github.com/trailofbits/skills" From 4cad8617891d329afdb1fc0f62a5f88b374bc175 Mon Sep 17 00:00:00 2001 From: Dan Barr <6922515+danbarr@users.noreply.github.com> Date: Fri, 18 Sep 2026 15:11:21 -0400 Subject: [PATCH 4/4] Refresh trusted skill scan Signed-off-by: Dan Barr <6922515+danbarr@users.noreply.github.com>