skills.rest
marcosd4h
marcosd4hCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

finding-verification

Restate security findings and verify them against assembly ground truth.

17|3|Updated Feb 22, 2026
Search Tags:#verification#data-flow#false-positives#cross-module#taint-analysis#assembly-truth#security-verification
One-click install
npx skills add https://github.com/marcosd4h/DeepExtractRuntime --skill finding-verification
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: finding-verification
Source: https://github.com/marcosd4h/DeepExtractRuntime/tree/main/skills/finding-verification
Command: npx skills add https://github.com/marcosd4h/DeepExtractRuntime --skill finding-verification

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Verification of security findings eliminates false positives by anchoring conclusions in assembly ground truth and a formal gate-based workflow.

Core Features & Use Cases

  • Gate-based verification workflow that can route findings through Standard or Deep verification with clear criteria
  • Seamless integration with existing skills (taint-analysis, verify-decompiled, data-flow-tracer, callgraph-tracer, import-export-resolver)
  • Outputs a final verdict with evidence and guidance for batch triage

Quick Start

Restate a finding and run the standard verification workflow to obtain a definitive TRUE POSITIVE or FALSE POSITIVE verdict with evidence.

Frequently Asked Questions about finding-verification

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify security findings to eliminate false positives in a modular codebase?▼

Taint-analysis verification requires cross-skill coordination to trace attacker-controlled data flows across modular codebases, validate cross-module boundaries, and check assembly ground truth to reliably classify findings as true or false positives.

How do I confirm if a taint-analysis finding is a true positive using assembly ground truth?▼

Confirm a taint-analysis finding by running a gate-based verification workflow that checks assembly ground truth, traces data-flow, verifies attacker-control, and validates cross-module boundaries to output a final verdict with evidence.

Does the verification workflow support batch triage of memory corruption findings?▼

Yes, the verification workflow supports batch triage by routing memory-corruption-detector findings through Standard or Deep verification gates, outputting a final verdict with evidence and guidance for reliable triage.

Can I use data-flow tracing and callgraph analysis together to validate logic vulnerability findings?▼

You can integrate data-flow-tracer and callgraph-tracer to validate logic-vulnerability-detector findings, requiring cross-skill coordination to trace execution paths and verify attacker-control across modular codebases.

When should I use deep verification instead of the standard gate-based workflow for security findings?▼

Use deep verification for complex security findings requiring extensive data-flow tracing and cross-module boundary validation, while the standard gate-based workflow handles routine verification with clear criteria and faster triage.

Related Skills

Explore More Software Engineering Skills→
debug-zhuweijiandebug-zhuweijian
13

Confidence Check

Assess confidence before implementation with five pre-implementation checks.

Community
Intermediate
Ramprasad4121Ramprasad4121
1

fp-check

Verify suspected security bugs and produce documented TRUE POSITIVE or FALSE POSITIVE verdicts.

Community
Advanced
marcosd4hmarcosd4h
17

deep-context-builder

Creates block-by-block analyses of JaGER | Oops, correcting: analyses of decompiled functions with invariants and cross-references for audits.

Community
Advanced
marcosd4hmarcosd4h
17

reconstruct-types

Reconstructs binary type layouts from CUDA C++ IR and MCU assembly IR; outputs CUDA-C++-compatible .h and .c files.

Community
Advanced