trailofbits/claude-code-config

1,888 stars · Last commit 2026-04-02

Opinionated defaults, documentation, and workflows for Claude Code at Trail of Bits

README preview

# Trail of Bits Claude Code Config

Opinionated defaults, documentation, and workflows for Claude Code at Trail of Bits. Covers sandboxing, permissions, hooks, skills, MCP servers, and usage patterns we've found effective across security audits, development, and research.

> Also see: [skills](https://github.com/trailofbits/skills) · [skills-curated](https://github.com/trailofbits/skills-curated) · [claude-code-devcontainer](https://github.com/trailofbits/claude-code-devcontainer) · [dropkit](https://github.com/trailofbits/dropkit)

**First-time setup:**

```bash
git clone https://github.com/trailofbits/claude-code-config.git
cd claude-code-config
claude
```

Then inside the session, run `/trailofbits:config`. It walks you through installing each component, detects what you already have, and self-installs the command so future runs work from any directory. Run `/trailofbits:config` again after updates.

## Contents

**[Getting Started](#getting-started)**
- [Read These First](#read-these-first)

View full repository on GitHub →