What problem does it solve? Security audits and static analysis tools generate many suspected bugs, but a large share are false positives. This Skill systematically verifies each suspected vulnerability through data flow tracing, mathematical bounds proofs, exploitability analysis, and devil's advocate review, so you only act on real, exploitable bugs. ## Core Features & Use Cases - Routed Verification Paths: Routes each bug to a linear standard checklist for straightforward claims or a full task-based deep verification workflow for complex, cross-component, or concurrency-related bugs. - Evidence-Based Verdicts: Applies six mandatory gate reviews (process, reachability, impact, PoC, math bounds, environment) and issues TRUE POSITIVE or FALSE POSITIVE verdicts with documented evidence. - Bug-Class Guidance: Provides class-specific verification requirements for memory corruption, logic bugs, race conditions, integer issues, crypto weaknesses, injection, information disclosure, DoS, and deserialization. - Use Case: After a security scanner flags 20 potential vulnerabilities in a C codebase, run this Skill to verify each finding, collapse obvious false positives during claim restatement, and receive a final summary of confirmed bugs with proof-of-concept sketches. ## Quick Start Ask the AI to verify whether a specific suspected vulnerability in your code is a true positive or a false positive.
