BuildCC-BY-SA-4.0

Code improver

by Trail of Bits (opens in a new tab) trailofbits/skills

Runs a scoped reviewer-and-fixer loop until blocking findings clear or convergence fails.

Installation

Skills CLI

Skills CLI command
npx skills@latest add trailofbits/skills --skill code-improver

Requires Node.js and npm. Choose your agents in the installer; add -g for a global installation.

Fieldbook review

Reviewed 27 Sept 2026

Requires an existing target directory, a user-named installed reviewer, explicit writable globs, and the plugin's dynamic workflow. The workflow keeps a findings ledger, guards scope, uses reviewer and fixer agents, never commits, and stops on caps, repeated findings, unavailable reviewers, or finalization regressions.

  • LicenceCC-BY-SA-4.0
  • FrontmatterValid name and description
  • Risky patternsNone found
  • Size134 lines
  • Last checked27 Sept 2026 · a4e33a24c853da3df13262da9bce1fd833dce694493b344e001f18df73692d2f

What it can touch

  • Edits code

    Changes files in your project.

  • Runs commands

    Runs shell commands such as tests, builds or installs.

  • Uses git

    Reads history or makes commits, branches or worktrees.

  • Subagents

    Starts other agents to work in parallel.

Read the source

Fieldbook links to the original instead of copying it, so you always read the version you install.

plugins/code-improver/skills/code-improver/SKILL.md on GitHub (opens in a new tab)