skills.rest
Ramprasad4121
Ramprasad4121COMMUNITY
Explore all skills by this author →
WebsiteGitHub

fp-check

Verify suspected security bugs and produce documented TRUE POSITIVE or FALSE POSITIVE verdicts.

1|Updated Feb 17, 2026
Search Tags:#security#vulnerability#verification#audit#false positive#true positive
One-click install
npx skills add https://github.com/Ramprasad4121/srp --skill fp-check-ramprasad4121
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: fp-check
Source: https://github.com/Ramprasad4121/srp/tree/main/skills-repos/trailofbits/plugins/fp-check/skills/fp-check
Command: npx skills add https://github.com/Ramprasad4121/srp --skill fp-check-ramprasad4121

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill systematically verifies suspected security bugs to eliminate false positives, providing definitive TRUE POSITIVE or FALSE POSITIVE verdicts with documented evidence.

Core Features & Use Cases

  • Bug Verification: Confirms or refutes the existence of reported vulnerabilities.
  • Evidence Generation: Produces documented proof for each verdict.
  • Use Case: After an automated scanner flags a potential buffer overflow, use this Skill to rigorously check if the bug is real and exploitable, or if it's a false alarm due to existing mitigations or unreachable code paths.

Quick Start

Use the fp-check skill to verify the claimed vulnerability in the provided code snippet.

Frequently Asked Questions about fp-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify if a security vulnerability is a true positive or false positive?▼

Security bug verification eliminates false positives by analyzing reported vulnerabilities against code, context, and exploitability, producing documented TRUE POSITIVE or FALSE POSITIVE verdicts with evidence.

What is the best way to check automated scanner results for false positive vulnerabilities?▼

Checking automated scanner results for false positive vulnerabilities involves rigorously analyzing flagged bugs against existing mitigations and unreachable code paths to confirm if the vulnerability is real and exploitable.

How does vulnerability verification provide evidence for security audits?▼

Vulnerability verification provides evidence for security audits by systematically analyzing claims against code and context, producing documented proof for each TRUE POSITIVE or FALSE POSITIVE verdict.

When do I need to use deep verification paths for security bug analysis?▼

Deep verification paths for security bug analysis are needed when handling complex suspected vulnerabilities, employing rigorous evaluation of exploitability and context beyond standard verification methods.

Can I use automated verification to confirm a reported buffer overflow vulnerability?▼

You can use automated verification to confirm a reported buffer overflow by rigorously checking if the bug is real and exploitable, or a false alarm caused by existing mitigations or unreachable code paths.

Why does my vulnerability scanner report false positives on unreachable code paths?▼

Vulnerability scanners report false positives on unreachable code paths because they lack context to evaluate exploitability, requiring systematic verification to analyze claims and refute the existence of reported bugs.

Related Skills

Explore More Software Engineering Skills→
rohanbhatia27rohanbhatia27
1

fp-check

Verify suspected security bugs by analyzing code paths and exploitability.

Community
Advanced
iiammaeiiammae

fp-check

Verify suspected security bugs and classify them as true or false positives.

Community
Advanced
SocketDevSocketDev
125

triaging-findings

Verify, deduplicate, and rank scanner findings into TRIAGE.json and TRIAGE.md.

Official
Advanced
thisisqubikathisisqubika

security-review

Analyze code repositories for vulnerabilities using SAST and AI triage.

Official
Advanced