Agent skill · Trail of Bits
Property-Based Testing
Officialname: property-based-testing★ 7.8k (repo)pushed 2026-10-24CC-BY-SA-4.0SKILL.md on GitHubchecked 2026-10-24
Install
The skills CLI copies the skill into the folder of each agent you pick (Claude Code, Codex, Cursor, Copilot, Gemini CLI, OpenCode, Windsurf...). Add -g for all projects. Needs Node.js 22.20+. docs
npx skills add trailofbits/skills --skill property-based-testing
This repo is a plugin marketplace. Inside Claude Code, add it and install the plugin that holds the skill (audit-context-building, building-secure-contracts, burpsuite-project-parser, chrome-mcp-troubleshooting...), or copy only this skill into ~/.claude/skills. docs
/plugin marketplace add trailofbits/skills /plugin install <plugin>@trailofbits # or only this skill: npx skills add trailofbits/skills --skill property-based-testing -a claude-code
Download the skill folder, zip it, then Customize > Skills > + > Create skill > Upload a skill. Code execution must be on (Settings > Capabilities). docs
git clone --depth 1 https://github.com/trailofbits/skills.git /tmp/property-based-testing-src cp -r /tmp/property-based-testing-src/plugins/property-based-testing/skills/property-based-testing ./property-based-testing zip -r property-based-testing.zip property-based-testing
Codex reads skills from .agents/skills in the repo or ~/.agents/skills. Type $ in Codex to use one. docs
npx skills add trailofbits/skills --skill property-based-testing -a codex
gh skill (GitHub CLI 2.90+, preview) installs it for Copilot in VS Code, the CLI and the cloud agent. Copilot also reads .github/skills and ~/.copilot/skills. docs
gh skill install trailofbits/skills property-based-testing
Cursor reads .cursor/skills, .agents/skills and ~/.cursor/skills (and .claude/skills). It does not install loose skills from a GitHub URL, so copy it in. docs
npx skills add trailofbits/skills --skill property-based-testing -a cursor
Installs from the GitHub repo; --path picks this skill out of the repo. Default scope is user (all projects). docs
gemini skills install https://github.com/trailofbits/skills.git --path plugins/property-based-testing/skills/property-based-testing
OpenCode reads .opencode/skills, ~/.config/opencode/skills and the Claude and .agents folders. docs
npx skills add trailofbits/skills --skill property-based-testing -a opencode
Windsurf (now Devin Desktop) reads .devin/skills, .windsurf/skills and ~/.codeium/windsurf/skills. docs
npx skills add trailofbits/skills --skill property-based-testing -a windsurf
More from trailofbits/skills
- Agentic Actions Auditor: Audits GitHub Actions workflows that run AI agents for prompt-injection and privilege risks.
- CodeQL Scan: Builds a CodeQL database and runs data-flow and taint analysis to find vulnerabilities.
- Constant-Time Analysis: Finds timing side channels in cryptographic code, such as branches on secret values.
- Differential Security Review: Security review of a diff that weighs blast radius, call sites and test coverage of changed code.
- Modern Python Tooling: Sets up Python projects with uv, ruff and ty, or migrates from pip, Poetry and mypy.
- Semgrep Rule Creator: Writes custom Semgrep rules to catch specific bug or vulnerability patterns.
- Sharp Edges: Flags error-prone APIs, risky defaults and footgun designs that invite security mistakes.
Other testing & qa skills
- Web App Testing · Anthropic
- Agent Browser · Vercel
- Playwright Browser Automation · OpenAI
- Playwright CLI · Microsoft (Playwright)
- Analyze .NET Performance · Microsoft (.NET)
- Browserbase Browser · Browserbase
- Adversarial UI Test · Browserbase
- Find Bugs · Sentry
FAQ
How do I install the property-based-testing skill?+
Run npx skills add trailofbits/skills --skill property-based-testing and pick your agents, or use the tab for your agent above. In Claude Code the skill ends up in ~/.claude/skills/property-based-testing/SKILL.md.
Which agents can use Property-Based Testing?+
Any agent that reads the Agent Skills format (SKILL.md): Claude Code, the Claude apps, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode, Windsurf and more.
Who maintains Property-Based Testing?+
Trail of Bits, the company or project behind it, in the trailofbits/skills repo on GitHub, last pushed 2026-10-24.
Read a skill's SKILL.md and scripts before you install it: skills aren't verified by any agent vendor. All agent skills · MCP servers