Verify suspected security vulnerabilities and classify them as true or false positives.
npx skills add https://github.com/rauly-1408/order-saas --skill fp-check-rauly-1408
Please help me install this Agent Skill. Skill: fp-check Source: https://github.com/rauly-1408/order-saas/tree/main/.claude/skills/fp-check Command: npx skills add https://github.com/rauly-1408/order-saas --skill fp-check-rauly-1408
This Skill helps security reviewers determine whether suspected vulnerabilities are real issues or false positives by enforcing a structured verification process with evidence-based conclusions.
Use the fp-check skill to verify whether the reported security vulnerability in the provided code is exploitable and document the final verdict.
High-intent search queries and answers about installing and using this skill.
Vulnerability verification involves restating the claim, applying threat modeling, tracing data flows, and collecting evidence to determine whether a suspected security issue is exploitable and classify it as a true positive or false positive.
Reducing false positives during code review requires enforcing a structured verification process using standard and deep verification paths, ensuring analysts document evidence-based conclusions before reporting unproven security vulnerabilities.
Data flow tracing for vulnerability validation works by tracking how untrusted inputs move through application logic, allowing security reviewers to confirm exploitability and produce a documented verdict for suspected flaws like SQL injection or memory corruption.
Yes, you can use this process to triage memory corruption and logic flaws. It guides analysts through threat modeling and evidence collection to assess whether these specific suspected vulnerabilities are exploitable.
Yes, threat modeling is required to check exploitability. It provides the structured analysis workflow needed to evaluate the attack surface and verify whether a suspected bug represents a genuine security threat.
Structured analysis workflows prevent reporting unproven security issues by ensuring reviewers collect concrete evidence and trace data flows before reaching a final true positive or false positive conclusion.
sbknanaTrace code flows and document invariants for security auditing.
ofelixdevVerify suspected security bugs and produce TRUE POSITIVE or FALSE POSITIVE verdicts.
CENKSSSValidate SAST and DAST vulnerability exploitability through a 4-phase pipeline.
Factory-AIValidate security findings by assessing exploitability and generating proof-of-concept exploits.
