Trailofbits:Burp Search
Searches Burp Suite project files for security analysis
- Type
- Slash Command
- Repository
- trailofbits/skills
- GitHub stars
- 7.3k
- License
- CC-BY-SA-4.0
- Repo last updated
- Sep 25, 2026
What Trailofbits:Burp Search is
Trailofbits:Burp Search is a slash command published in the trailofbits/skills repository on GitHub, which has about 7.3k stars. The repository describes itself as: “Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows”
A slash command is a reusable prompt saved as a markdown file and run by typing its name after a slash. In Claude Code, custom commands have been merged into skills: a file in .claude/commands/ and a skill folder in .claude/skills/ both create the same kind of command, and existing command files keep working.
Trailofbits:Burp Search gives you a repeatable way to run the same instructions without retyping them, optionally with arguments.
How to install Trailofbits:Burp Search
Claude Code
- Download burp-search.md from the repository.
- Save it to ~/.claude/commands/ (all projects) or .claude/commands/ (one project). As a skill, you can instead save it as ~/.claude/skills/<name>/SKILL.md.
- Run it by typing / followed by its name, with arguments such as <burp-file> [operation].
Claude Cowork
- Turn the command into a skill: create a folder with the file saved as SKILL.md and zip it.
- In Customize → Skills, click +, then upload the ZIP.
- Run it from any task with / and the skill name.
New to extending Cowork? Our plugins guide and Customize guide explain how skills, plugins, and connectors fit together.
Inside the source file
An excerpt from plugins/burpsuite-project-parser/commands/burp-search.md, shared under the repository's CC-BY-SA-4.0 license. Read the full file on GitHub.
Arguments: $ARGUMENTS
Parse arguments:
- Burp file (required): Path to .burp project file
- Operation (optional): auditItems, proxyHistory.*, responseHeader='...', responseBody='...'
Invoke the burpsuite-project-parser skill with these arguments for the full workflow.
Before you install
- Read the whole file first. Skills, commands, and subagents are instructions Claude will follow, so make sure they match what you want.
- Check which tools, scripts, or MCP servers it uses. Local servers and scripts run with your permissions.
- Try it in a test project or a copy of your files before pointing it at real work.
- Pin the version you tested, and review changes before updating.
- Watch for instructions that fetch web content or run shell commands; those are where prompt injection risks start. See our prompt injection guide.
FAQ
What is Trailofbits:Burp Search?
Trailofbits:Burp Search is a slash command for Claude Code and Claude Cowork from the trailofbits/skills repository on GitHub. Searches Burp Suite project files for security analysis
How do I install Trailofbits:Burp Search in Claude Code?
Download burp-search.md from the repository. Save it to ~/.claude/commands/ (all projects) or .claude/commands/ (one project). As a skill, you can instead save it as ~/.claude/skills/<name>/SKILL.md. Run it by typing / followed by its name, with arguments such as <burp-file> [operation].
Can I use Trailofbits:Burp Search in Claude Cowork?
Turn the command into a skill: create a folder with the file saved as SKILL.md and zip it. In Customize → Skills, click +, then upload the ZIP. Run it from any task with / and the skill name.
Is Trailofbits:Burp Search safe to install?
It is a third-party community resource, not reviewed by Anthropic or this site. Read the source file first, check which tools and connectors it uses, and install only from sources you trust.
Similar resources
- Ask Questions If Underspecified Clarify ambiguous requirements by asking questions before implementing. Only when invoked explicitly. Plugin · trailofbits/skills
- Audit Context Building Understand a codebase before looking for bugs in it. Reads it function by function, records what each one assumes and depends on, and saves the write-ups to files instead of filling up the conversation. Plugin · trailofbits/skills
- Agentic Actions Auditor Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations (Claude Code Action, Gemini CLI, OpenAI Codex, GitHub AI Inference) Plugin · trailofbits/skills
- C Review Dedup Judge Deduplication judge for the c-review pipeline. Merges duplicate findings deterministically by exact location and bug class, then runs LLM… Subagent · trailofbits/skills
- Trailofbits:Ct Check Detects timing side-channels in cryptographic code Slash Command · trailofbits/skills
- Trailofbits:Audit Context Builds deep architectural context before vulnerability hunting Slash Command · trailofbits/skills
- Trailofbits:Diff Review Performs security-focused differential review of code changes Slash Command · trailofbits/skills
- Google Workspace Google Workspace CLI operations: setup diagnostics, security audit, recipe discovery, and output analysis. Usage: /google-workspace <setup|audit|recipe|analyze> [options] Slash Command · alirezarezvani/claude-skills