Verify suspected security bugs and classify them as true or false positives.
npx skills add https://github.com/trailofbits/skills --skill fp-check-trailofbits
Please help me install this Agent Skill. Skill: fp-check Source: https://github.com/trailofbits/skills/tree/main/plugins/fp-check/skills/fp-check Command: npx skills add https://github.com/trailofbits/skills --skill fp-check-trailofbits
This Skill systematically verifies suspected security bugs to eliminate false positives, providing a TRUE POSITIVE or FALSE POSITIVE verdict with documented evidence.
Run the fp-check skill on your code to verify a suspected bug and receive a detailed analysis.
High-intent search queries and answers about installing and using this skill.
Security bug verification systematically analyzes suspected vulnerabilities, execution paths, and exploitability to deliver documented TRUE POSITIVE or FALSE POSITIVE verdicts, eliminating false positives through evidence-based assessment.
False positive elimination works by applying bug-class-specific analysis for memory corruption, logic bugs, and race conditions, identifying common false positive patterns to systematically verify suspected vulnerabilities.
The best way to demonstrate exploitability during security auditing is by generating pseudocode, executable, and unit test proofs-of-concept to verify the suspected bug and document the evidence.
Yes, you can use both standard and deep verification methods to suit different complexity levels, managing the process through task-based orchestration to ensure all verification steps and dependencies are followed.
You should not use automated false positive elimination when detailed analysis of code and execution paths is impossible, as providing a TRUE POSITIVE or FALSE POSITIVE verdict requires comprehensive security auditing and exploitability assessment.
rohanbhatia27Verify suspected security bugs by analyzing code paths and exploitability.
Factory-AIValidate security findings by assessing exploitability and generating proof-of-concept exploits.
inbharataiIdentify security vulnerabilities in code and configurations via CVE lookups and SAST findings.
cyberkaidaIdentify memory corruption vulnerabilities in CTF binaries and outline exploitation plans.
