verifier.org

Trail of Bits Curated Skills

the only marketplace with real security review behind it

free — CC-BY-SA-4.0#organisations-that-can-t

the highest-trust source in the ecosystem after anthropic's own, from a serious security firm — and the clearest case on this site of stars being a useless quality signal.

trail of bits, an established security firm, maintains a marketplace containing only plugins and marketplaces their staff have code-reviewed. their stated reason is blunt: published skills have been found with backdoors and malicious hooks, and the ecosystem has no built-in quality gate.

given that the security model everywhere else is trust-the-publisher — anthropic's own docs say they can't verify plugins work as intended — a human security review is the strongest assurance available.

the description above is ours, condensed from the ranking. pricing moves — check it on the vendor's own page before you rely on it.

pricing
free — CC-BY-SA-4.0
website
github.com
our verdict

the highest-trust source in the ecosystem after anthropic's own, from a serious security firm — and the clearest case on this site of stars being a useless quality signal.

we researched this category against vendors' own pricing pages and licence files. that is where this line comes from — not from the vendor, and not from anything they paid for.

more claude code plugins

claudekit

hooks, subagents and commands packaged as one installable toolkit

#hooks#toolkit

ccstatusline

configurable status line showing model, context use and session cost

#statusline

ccusage

reads local session files to report token use and cost per project

#usage#cost

frontend-design

we checked thisfree — Apache-2.0

the single most-installed plugin there is

#anyone-generating-ui-who