Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or analyzing environment variable handling.
Install
npx skills add trailofbits/skills --skill insecure-defaultsnpx skills add trailofbits/skills --skill insecure-defaults -a claude-code -gnpx skills add trailofbits/skills --skill insecure-defaults -a codex -ggemini skills install https://github.com/trailofbits/skills.git --path plugins/insecure-defaults/skills/insecure-defaultsgh skill install trailofbits/skills insecure-defaultsgit clone --depth 1 https://github.com/trailofbits/skills /tmp/trailofbits__skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/trailofbits__skills/plugins/insecure-defaults/skills/insecure-defaults ~/.claude/skills/insecure-defaults # Claude Code
cp -R /tmp/trailofbits__skills/plugins/insecure-defaults/skills/insecure-defaults ~/.agents/skills/insecure-defaults # Codex, Cursor, Gemini CLI, Copilot, OpenCode