Review reported vulnerabilities in code to identify false positives.
npx skills add https://github.com/codexstar69/bug-hunter --skill skeptic-codexstar69
Please help me install this Agent Skill. Skill: skeptic Source: https://github.com/codexstar69/bug-hunter/tree/main/skills/skeptic Command: npx skills add https://github.com/codexstar69/bug-hunter --skill skeptic-codexstar69
This Skill acts as an adversarial code reviewer, rigorously challenging reported bugs to eliminate false positives and ensure only genuine vulnerabilities are escalated.
Use the skeptic skill to review the findings in the attached file 'hunter-findings.json'.
High-intent search queries and answers about installing and using this skill.
To validate security findings and eliminate false positives, perform adversarial code review by re-reading the code, verifying framework behaviors against documentation, and challenging reported vulnerabilities to ensure only genuine bugs are escalated.
Adversarial testing for vulnerability validation critically evaluates bug findings by looking for reasons to disprove them, acting as an immune system to prevent wasted developer time on non-issues.
To review a JSON file of bug findings, use the skeptic skill to analyze the attached file 'hunter-findings.json', which requires rigorous analysis of code context to identify and filter out false positives.
Yes, contextual framework analysis can refute a reported SQL injection by verifying if the ORM inherently prevents the injection, using framework knowledge and documentation lookups to mark it as a false positive.
The best way to challenge reported vulnerabilities is through rigorous adversarial code review that verifies framework behaviors against documentation and requires JSON output of findings to ensure only valid issues are escalated.
Yes, adversarial code review requires access to code context for rigorous analysis, utilizing framework knowledge and documentation lookups to critically evaluate findings and verify or refute bug claims.
MichielDeanPersist adversarial code review findings as self_assessment memories via the llmem track-review CLI.
readysettechAudits rdst CLI usability across discoverability, consistency, and error handling; outputs bug reports and improvement registry.
codexstar69Execute STRIDE-based security reviews with dependency vulnerability scanning and threat model analysis.
OneWave-AIReview code for security vulnerabilities, performance bottlenecks, and maintainability issues.
