Map variant vulnerabilities across a codebase using pattern-based analysis.
npx skills add https://github.com/roderik/mpe --skill variant-analysis
Please help me install this Agent Skill. Skill: variant-analysis Source: https://github.com/roderik/mpe/tree/main/.agents/skills/variant-analysis Command: npx skills add https://github.com/roderik/mpe --skill variant-analysis
Find similar vulnerabilities across a codebase using pattern-based analysis to accelerate triage and remediation.
Analyze the repository for variant vulnerabilities: start with the exact pattern from the original bug, then progressively generalize to uncover variants and generate a findings report.
High-intent search queries and answers about installing and using this skill.
To find variant vulnerabilities, apply a pattern-based analysis that starts with the exact match of the original bug and progressively generalizes the search to uncover similar issues across modules.
Pattern-based analysis for bug variants works by enforcing a repeatable five-step process that expands from exact code matches to broader generalized taint tracking and cross-file patterns.
Yes, you can use the variant analysis process to build CodeQL and Semgrep queries by systematically generalizing the original vulnerability pattern into reusable search rules.
The best way to triage cross-project vulnerability hunts is to generate structured triage-ready reports that map variant findings discovered through the generalized pattern analysis.
Yes, variant analysis supports cross-file taint tracking by allowing the stepwise generalization from exact matches to broader security patterns across different files in the codebase.
Pattern-based variant analysis relies on an existing initial finding to derive exact and generalized patterns, meaning it requires a known vulnerability to start the five-step process and map variants.
geblIdentify and propagate root-cause vulnerability patterns across a codebase.
89jobrienAggregate and deduplicate security vulnerabilities from Dependabot, GCP Artifact Registry, Docker Scout, and Linear.
Ramprasad4121Search codebases for patterns matching known vulnerabilities and bugs.
statick88Scan codebases for security vulnerabilities, dependency issues, and secret exposure.
