---
title: "Wycheproof - Air Market"
description: "You have written or are reviewing cryptographic code and want to know it holds up against problems people have already found. Wycheproof supplies test vectors for exactly that. Reach for it when you…"
canonical: "https://airmarket.ai/app/wycheproof"
---

[Air Market](/) / [Security](/category/security) / Wycheproof

Skill by [Trail of Bits](/@trailofbits)

# Wycheproof

Test your crypto against the attacks and edge cases already catalogued

## What this does

You have written or are reviewing cryptographic code and want to know it holds up against problems people have already found. Wycheproof supplies test vectors for exactly that. Reach for it when you need to test a crypto implementation against known attacks and awkward edge cases rather than only the happy path.

### Top 3 things it does for you

- Check crypto code against known attacks
- Pull in test vectors for edge cases you would not think of

## Information

**Wycheproof at a glance**

|  |  |
| --- | --- |
| Kind | Skill |
| Publisher | [Trail of Bits](/@trailofbits) |
| Category | [Security](/category/security) |
| Works with | Agent Skills - an open standard supported by 40+ agents |
| Size | 23 KB |
| Licence | CC-BY-SA-4.0 |
| Repository | [trailofbits/skills](https://github.com/trailofbits/skills/tree/d5fe2e6a7896236c3102fd5477e833623ad70298/plugins/testing-handbook-skills/skills/wycheproof) |
| GitHub stars | 6,823 (as of Nov 2026) |
| Installs | 5,552, counted by skills.sh (Nov 2026) |

## Security report

**Verified.** AIR scanned this exact version of Wycheproof and flagged nothing. AIR's verdict: **safe**.

**What Wycheproof's check was run against**

|  |  |
| --- | --- |
| Commit | d5fe2e6a7896236c3102fd5477e833623ad70298 |
| Content hash | 5c36f70fa6aa9a7e49a8a941878d0e778c7002965aff2b9dbd2ff4ea82893aeb |
| Files read | [Browse the files at this exact commit](https://github.com/trailofbits/skills/blob/d5fe2e6a7896236c3102fd5477e833623ad70298/plugins/testing-handbook-skills/skills/wycheproof/SKILL.md) |

A scan is named by the exact content it read, not by a version number. A different version is a different artifact, and nothing here applies to a version AIR has not scanned.

[Read the full security report for Wycheproof](/security/wycheproof)

## About Wycheproof

Wycheproof provides test vectors for validating cryptographic implementations. Use it when you are testing crypto code against known attacks and edge cases.

## What's inside

- SKILL.md - instructions
- agents/openai.yaml - data
- assets/trail-of-bits-mark.svg - template

## Questions

### Is Wycheproof safe to install?

AIR scanned this exact version of Wycheproof and flagged nothing. AIR's verdict: safe. The verdict is named by the content that was read, at commit d5fe2e6a7896, so it cannot drift onto a version nobody scanned. The full report is at https://airmarket.ai/security/wycheproof.

### How do I install Wycheproof?

Open https://airmarket.ai/app/wycheproof on Air Market and use the install action: Air Market hands Claude a prompt naming this exact skill, and Claude sets it up. Source, pinned to the exact commit this listing describes: https://github.com/trailofbits/skills/tree/d5fe2e6a7896236c3102fd5477e833623ad70298/plugins/testing-handbook-skills/skills/wycheproof. Install from that link, not the branch.

## Related on Air Market

- [More Security listings](/category/security)
- [Everything by Trail of Bits](/@trailofbits)

---

Canonical URL: <https://airmarket.ai/app/wycheproof>