---
title: "Vector Forge - Air Market"
description: "You have code implementing a cryptographic algorithm and a set of tests, but no real confidence the tests exercise it. This locates the implementations, uses mutation testing to spot code paths nothi…"
canonical: "https://airmarket.ai/app/vector-forge"
---

[Air Market](/) / [Security](/category/security) / Vector Forge

Skill by [Trail of Bits](/@trailofbits)

# Vector Forge

Find the crypto code your tests never touch, then cover it

## What this does

You have code implementing a cryptographic algorithm and a set of tests, but no real confidence the tests exercise it. This locates the implementations, uses mutation testing to spot code paths nothing catches, and writes new test vectors aimed at those paths. It then compares kill rates before and after so you can see whether the new vectors made a difference.

### Top 3 things it does for you

- Find the parts of a crypto implementation the tests miss
- Generate test vectors aimed at the untested paths
- Show that new vectors actually improved coverage

## Information

**Vector Forge at a glance**

|  |  |
| --- | --- |
| Kind | Skill |
| Publisher | [Trail of Bits](/@trailofbits) |
| Category | [Security](/category/security) |
| Works with | Agent Skills - an open standard supported by 40+ agents |
| Size | 66 KB |
| Licence | CC-BY-SA-4.0 |
| Repository | [trailofbits/skills](https://github.com/trailofbits/skills/tree/07bce8a2c8ccc56c5b44b7067a04b8bf46128f05/plugins/trailmark/skills/vector-forge) |
| GitHub stars | 6,823 (as of Nov 2026) |
| Installs | 4,232, counted by skills.sh (Nov 2026) |

## Security report

**Verified.** AIR scanned this exact version of Vector Forge and flagged nothing. AIR's verdict: **safe**.

**What Vector Forge's check was run against**

|  |  |
| --- | --- |
| Commit | 07bce8a2c8ccc56c5b44b7067a04b8bf46128f05 |
| Content hash | c89e1ab63a1c2401c7a5fa8d5a884e1c7b09754cbd91d1ce33c92259d3a4a4f1 |
| Files read | [Browse the files at this exact commit](https://github.com/trailofbits/skills/blob/07bce8a2c8ccc56c5b44b7067a04b8bf46128f05/plugins/trailmark/skills/vector-forge/SKILL.md) |

A scan is named by the exact content it read, not by a version number. A different version is a different artifact, and nothing here applies to a version AIR has not scanned.

[Read the full security report for Vector Forge](/security/vector-forge)

## About Vector Forge

Test vectors for cryptographic code are only as good as the paths they reach. This finds implementations of an algorithm or protocol, runs mutation testing to identify mutants that escaped the existing suite, and generates new vectors that deliberately exercise the code those escapes revealed.

Effectiveness is not asserted, it is measured: mutation kill rates before and after are compared so the new vectors have to earn their place.

Reach for it when generating cryptographic test vectors, measuring Wycheproof coverage gaps, hunting escaped mutants, building cross-implementation test suites, or improving vector coverage for a crypto primitive.

## What's inside

- SKILL.md - instructions
- agents/openai.yaml - data
- assets/trail-of-bits-mark.svg - template
- references/fault-simulation.md - reference
- references/lessons-learned.md - reference
- references/mutation-frameworks.md - reference
- references/report-template.md - reference
- references/vector-patterns.md - reference

## Questions

### Is Vector Forge safe to install?

AIR scanned this exact version of Vector Forge and flagged nothing. AIR's verdict: safe. The verdict is named by the content that was read, at commit 07bce8a2c8cc, so it cannot drift onto a version nobody scanned. The full report is at https://airmarket.ai/security/vector-forge.

### How do I install Vector Forge?

Open https://airmarket.ai/app/vector-forge on Air Market and use the install action: Air Market hands Claude a prompt naming this exact skill, and Claude sets it up. Source, pinned to the exact commit this listing describes: https://github.com/trailofbits/skills/tree/07bce8a2c8ccc56c5b44b7067a04b8bf46128f05/plugins/trailmark/skills/vector-forge. Install from that link, not the branch.

## Related on Air Market

- [More Security listings](/category/security)
- [Everything by Trail of Bits](/@trailofbits)

---

Canonical URL: <https://airmarket.ai/app/vector-forge>