find-bugs

Audit code changes to identify bugs, security flaws, and quality issues.

4|Updated Feb 22, 2026
One-click install
npx skills add https://github.com/GeneralReasoning/env-skillsbench --skill find-bugs-generalreasoning
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: find-bugs
Source: https://github.com/GeneralReasoning/env-skillsbench/tree/main/fix-erlang-ssh-cve/environment/skills/find-bugs
Command: npx skills add https://github.com/GeneralReasoning/env-skillsbench --skill find-bugs-generalreasoning

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps engineers identify and report bugs, security vulnerabilities, and code-quality issues in local branch changes to improve software safety and reliability.

Core Features & Use Cases

  • Phase-driven review: input gathering, attack surface mapping, and a formal security checklist to surface defects across changed files.
  • Output: a prioritized, actionable report listing issues with evidence and remediation suggestions.
  • Use Cases: code reviews, security audits, and compliance checks during pull/merge requests across languages.

Quick Start

Initiate a branch audit to surface bugs and vulnerabilities in the latest changes.

Frequently Asked Questions about find-bugs

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit code changes for security flaws and bugs?

To audit code changes for security flaws, this Skill applies a phase-based workflow that maps the attack surface and evaluates changed files against a formal checklist to produce a prioritized issue report with remediation suggestions.

Can I use static analysis for pull requests across different programming languages?

Yes, you can use static analysis for pull requests across multiple languages. This Skill performs security reviews and compliance checks on branch changes regardless of the programming language used.

What is the best way to find vulnerabilities during a code review?

The best way to find vulnerabilities during a code review is to use a structured, phase-based workflow. This approach gathers inputs, maps attack surfaces, and applies a security checklist to surface defects with actionable evidence.

What kind of report does the branch audit generate for identified issues?

The branch audit generates a prioritized, actionable report. This report lists identified bugs and security flaws alongside evidence and specific remediation suggestions to improve software safety.

Does this security review tool require any specific dependencies or components?

No dependencies or components are required to run this security review tool. You can initiate a branch audit directly to surface bugs and vulnerabilities in your latest local changes without external setup.

When do I need to perform a security assessment on my local branch changes?

You need to perform a security assessment on local branch changes during code reviews, pull requests, or merge requests. This ensures software safety by identifying bugs and quality issues before integration.