HacktronAIHacktronAIOfficialยท2 Agent Skills Included

skills

Security finding triage and binary patch analysis

Validates security scan findings against real source code to separate true positives from false positives, then proposes and commits fixes. Decompiles compiled binaries like JARs and DLLs to compare versions and identify exactly what a security patch changed. Eliminates manual code review of noisy scanner output and slow reverse-engineering of vendor patches.
npx skills add HacktronAI/skills --all -g -y

All Skills in This Repository (2)

Pure Emerald Level Indicators

Frequently Asked Questions

FAQPage Schema
How to install Hacktron skills?โ–ผ

Run `npx skills add HacktronAI/skills --all -g -y` in your terminal to install all skills in this repository globally.

How to triage security scan findings automatically?โ–ผ

The finding-triage skill fetches findings from the Hacktron API, reads the affected source code, verifies reachability, and marks each finding as a true or false positive with adjusted severity.

How to analyze what a security patch changed in a JAR or DLL?โ–ผ

The patch-diff-analyzer skill decompiles both the unpatched and patched binaries, generates a git diff, and identifies the exact security-relevant code changes.

What tools do these security skills require?โ–ผ

Finding triage needs curl, jq, and a Hacktron API key. Patch analysis needs git plus jadx for JAR files or ilspycmd for .NET DLLs.

Can these skills fix confirmed vulnerabilities automatically?โ–ผ

Yes. After you approve a proposed fix, the triage skill applies the smallest correct change and commits each fix separately without pushing unless you ask.

Related Repositories in Software Engineering

View All in Software Engineeringโ†’