testing-handbook-generator

The testing-handbook-generator skill is a meta-skill designed to generate and maintain Claude Code skills using content from the Trail of Bits Testing Handbook hosted at appsec.guide. It provides a structured workflow for analyzing handbook sections, classifying security testing topics, and transforming them into reusable AI-powered skills. The skill is specifically intended for automated or bulk generation of security testing skills and ensures that generated content stays aligned with the handbook’s structure and methodologies. It also enforces strict repository scope restrictions to prevent accidental modification of unrelated plugins or skills.

The skill includes a multi-phase workflow covering handbook discovery, content analysis, planning, two-pass generation, validation, and finalization. It supports mapping handbook sections into different skill categories such as tool skills, fuzzer skills, technique skills, and domain skills. It also identifies candidate sections using structural signals like numbered files, collapse sections, and resource files while excluding drafts, placeholders, empty directories, and GUI-only tools. Generated skills are written into controlled plugin locations, and the workflow includes validation steps such as running validators, testing activation, and updating cross-references and README entries.

This skill is intended for developers, AI skill maintainers, and application security engineers who want to automate the creation or refresh of structured security testing skills from handbook content. It is especially useful for teams maintaining large collections of security testing automation workflows or AI-assisted developer tooling. Users working with Trail of Bits Testing Handbook content can use this skill to standardize documentation generation and streamline maintenance of testing-related Claude Code skills.