fp-check
🤖 AI Summary
**fp-check** takes a suspected security bug as input, systematically analyzes it to determine if it's exploitable, and outputs a definitive TRUE POSITIVE or FALSE POSITIVE verdict with supporting evidence. It eliminates false positives by verifying exploitability rather than just flagging patterns.
How to Install
Claude Code:
git clone --depth 1 https://github.com/trailofbits/skills.git && cp skills/plugins/fp-check/skills/fp-check ~/.claude/skills/fp-check -rSystematically verifies suspected security bugs to eliminate false positives. Produces TRUE POSITIVE or FALSE POSITIVE verdicts with documented evidence for each bug.
Details
| Category | Security → vulnerability |
| Source | trailofbits/skills |
| SKILL.md | View on GitHub → |
| Repo Stars | ★ 5.8K |
| Est. per Skill | 98 (shared across 59 skills from this repo) |
| Difficulty | Intermediate |
| Risk Level | Safe |
Related Skills
varlock
Varlock Security Skill Secure-by-default environment variable management for Claude Code sessions. R
fix-review
Fix Review Overview Verify that fix commits properly address audit findings without introducing new
007
007 — Licenca para Auditar Overview Security audit, hardening, threat modeling (STRIDE/PASTA), Red/B
file-path-traversal
AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation,
Works Well With
Skills from the same repository — often designed to work together