skills.rest
ofelixdev
ofelixdevCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

fp-check

Verify suspected security bugs and produce TRUE POSITIVE or FALSE POSITIVE verdicts.

Updated Feb 24, 2026
Search Tags:#code analysis#security#vulnerability#verification#bug hunting#false positive
One-click install
npx skills add https://github.com/ofelixdev/cc-kit --skill fp-check
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: fp-check
Source: https://github.com/ofelixdev/cc-kit/tree/main/template/skills/fp-check
Command: npx skills add https://github.com/ofelixdev/cc-kit --skill fp-check

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill systematically verifies suspected security bugs to eliminate false positives, ensuring that only true vulnerabilities are reported and saving valuable developer time.

Core Features & Use Cases

  • Bug Verification: Rigorously checks if a reported security bug is a true positive or a false positive.
  • Evidence Generation: Produces documented evidence for each verdict (TRUE POSITIVE or FALSE POSITIVE).
  • Use Case: When a security researcher reports a potential buffer overflow, this Skill can be used to confirm if the vulnerability is real and exploitable, or if it's a false alarm due to upstream validation or other factors.

Quick Start

Use the fp-check skill to verify the suspected security bug described in the prompt.

Frequently Asked Questions about fp-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify suspected security bugs and eliminate false positives?▼

You can verify suspected security bugs by systematically tracing data flow and assessing exploitability to produce TRUE POSITIVE or FALSE POSITIVE verdicts with documented evidence, eliminating false alarms in security auditing workflows.

What is false positive verification in vulnerability analysis?▼

False positive verification in vulnerability analysis is the process of rigorously checking if a reported security bug is genuinely exploitable or a false alarm due to upstream validation, ensuring only true vulnerabilities are reported.

How do I confirm if a reported buffer overflow is a true positive or a false alarm?▼

To confirm if a reported buffer overflow is a true positive or false alarm, trace the data flow and assess exploitability to determine if upstream validation mitigates the threat, producing a documented TRUE POSITIVE or FALSE POSITIVE verdict.

Can I use code analysis and pattern matching to trace data flow for security auditing?▼

Yes, you can use code analysis and pattern matching to trace data flow and assess exploitability during security auditing, which systematically verifies suspected vulnerabilities and generates documented evidence for each verdict.

What's the best way to generate documented evidence for vulnerability verdicts?▼

The best way to generate documented evidence for vulnerability verdicts is to systematically verify suspected security bugs by tracing data flow and assessing exploitability, producing clear TRUE POSITIVE or FALSE POSITIVE results for security audits.

Related Skills

Explore More Software Engineering Skills→
rohanbhatia27rohanbhatia27
1

fp-check

Verify suspected security bugs by analyzing code paths and exploitability.

Community
Advanced
Ramprasad4121Ramprasad4121
1

fp-check

Verify suspected security bugs and produce documented TRUE POSITIVE or FALSE POSITIVE verdicts.

Community
Advanced
manuelbrandner85manuelbrandner85

fp-check

Validate suspected security vulnerabilities through data flow analysis and gate reviews.

Community
Advanced
rezosndrezosnd

security_scan

Run parallel dependency, static analysis, and dataflow security scans.

Community
Intermediate