skills.rest
gebl
geblCOMMUNITY
Explore all skills by this author →
GitHub

variant-analysis

Identify and propagate root-cause vulnerability patterns across a codebase.

1|Updated Mar 27, 2026
Search Tags:#codeql#semgrep#security-analysis#variant-analysis#vulnerability-patterns#pattern-generalization#risk-triage
One-click install
npx skills add https://github.com/gebl/anvil-skill-marketplace --skill variant-analysis-gebl
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: variant-analysis
Source: https://github.com/gebl/anvil-skill-marketplace/tree/main/generated/claude/skills/variant-analysis
Command: npx skills add https://github.com/gebl/anvil-skill-marketplace --skill variant-analysis-gebl

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Helps security analysts rapidly identify and enumerate variant vulnerabilities across large codebases by translating a known root-cause pattern into scalable search strategies.

Core Features & Use Cases

  • Exact-pattern identification to locate the initial vulnerability instance across a repository.
  • Incremental abstraction guidance from exact matches to semantic patterns to uncover related variants.
  • Guidance for building and refining CodeQL and Semgrep queries, triage workflows, and variant-analysis reporting.

Quick Start

Provide the initial vulnerability pattern and I will generate variant searches across the repository.

Frequently Asked Questions about variant-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find vulnerability variants across a large codebase?▼

Variant analysis identifies the root-cause pattern of an initial bug and progressively generalizes it into semantic abstractions to locate all matching instances across files, tracking true and false positives.

How do I create CodeQL and Semgrep queries from a known vulnerability pattern?▼

You create CodeQL and Semgrep queries by extracting the root-cause pattern from the initial vulnerability and applying incremental abstraction guidance to translate exact matches into scalable search strategies.

What is the best way to triage security findings during variant analysis?▼

Triage security findings during variant analysis by tracking true and false positives across files while generalizing the initial vulnerability pattern, then compose a concise variant-analysis report.

Can I use variant analysis to search for vulnerability patterns without writing custom queries?▼

Variant analysis requires translating a known root-cause pattern into scalable search strategies, providing actionable guidance for building and refining CodeQL or Semgrep queries rather than searching automatically.

Does variant analysis work with both CodeQL and Semgrep for security analysis?▼

Yes, variant analysis works with both CodeQL and Semgrep by providing actionable guidance for building, refining, and composing queries to detect generalized vulnerability patterns across a repository.

Related Skills

Explore More Software Engineering Skills→
vigoliumvigolium
965

variant-analysis

Generalize an initial bug into broader Semgrep or CodeQL search patterns.

Official
Intermediate
cropsggcropsgg
15

variant-analysis

Identifies all occurrences of a known vulnerability pattern across a codebase.

Community
Advanced
philo-grovesphilo-groves
12

maxtac-sast-opengrep

Author and execute OpenGrep rules for static application security testing.

Community
Advanced
OWASPOWASP
141

secrets-scan

Detect hardcoded secrets in source code and configuration files.

Official
Intermediate