What is insecure-defaults?
insecure-defaults is a Claude skill by trailofbits that detect insecure default configurations like hardcoded secrets, default credentials, and weak crypto. It is listed under Security and has 7,623 GitHub stars.
| Type | Claude skill |
|---|---|
| Author | trailofbits |
| Repository | trailofbits/skills |
| Popularity | 7,623 GitHub stars |
| Category | Security |
| Security | Not scanned |
| Rank | #372 of 1,262 Claude skills; #6 in Security |
| License | CC-BY-SA-4.0 |
| Last commit | 2026-10-15 |
| Stars this week | +142 |
Is insecure-defaults safe to install?
We have not scanned insecure-defaults yet because its SKILL.md could not be fetched. Read the source before installing.
| Check | Result |
|---|
How do I install insecure-defaults?
- Install with the skills CLI. Works for Claude Code and other agents that read skills.
npx skills add https://github.com/trailofbits/skills --skill insecure-defaults
- Or copy it by hand. Claude Code loads any folder with a SKILL.md from ~/.claude/skills.
git clone https://github.com/trailofbits/skills cp -r skills/insecure-defaults ~/.claude/skills/insecure-defaults
- Use it. Claude loads the skill when a task matches its description. You can also name it in your prompt.
Use the insecure-defaults skill to …
Or ask Claude to set it up
Paste this into Claude Code and it installs insecure-defaults for you:
Install the "insecure-defaults" skill from https://github.com/trailofbits/skills into ~/.claude/skills, then tell me in one line what it does.
More from trailofbits/skills
This repository has at least 9 Claude skills on MCPMods.
- ask-questions-if-underspecified: Prompt for clarification on ambiguous requirements (Not scanned)
- audit-context-building: Deep architectural context via ultra-granular code analysis (Not scanned)
- building-secure-contracts: Smart contract security toolkit with vulnerability scanners for 6 blockchains (Not scanned)
- burpsuite-project-parser: Search and extract data from Burp Suite project files (Not scanned)
- claude-in-chrome-troubleshooting: Diagnose and fix Claude in Chrome MCP extension connectivity issues (Not scanned)
- constant-time-analysis: Detect compiler-induced timing side-channels in crypto code (Not scanned)
- culture-index: Index and search culture documentation (Not scanned)
- differential-review: Security-focused diff review with git history analysis (Not scanned)