binary-bug-detection

Plugin binary-bug-detection from marketplace clearbit-plugins in prismers/clearbit-plugin. Commands read from the repo's manifest — 1 month ago.

Skills (4)

• cisb-bug-detection

  Detect compiler-introduced security bugs (CISB) in an ELF binary using ClearBit IR analysis. CISB are vulnerabilities created by correct compiler optimizations — dead store elimination removing secret scrubs, null-check elimination via no-UB assumptions, signed-overflow check removal, reordering of

• iot-bug-detection

  Detect taint-style vulnerabilities across multiple binaries in Linux-based IoT firmware using ClearBit IR analysis and cross-binary bridge point stitching. Use this skill for IoT firmware, router firmware, embedded Linux images, or any multi-binary system where taint flows between cooperating proces

• taint-bug-detection

  Detect taint-style vulnerabilities in a single ELF binary using ClearBit IR analysis — buffer overflow, command injection, use-after-free, and any taint-reachable sink. Use this skill for standalone binaries from desktop software, servers, CTF challenges, or daemons. Trigger on: "analyze this binary

• write-custom-query

  Write and run custom ClearBit queries against LLVM IR to answer specific questions about a binary's structure or data flow. Use whenever you need to go beyond standard taint analysis. Trigger on: "find all calls to X in function Y", "does this pointer alias", "trace how this value flows through IR",

Subagents (5)

• analyze-agent

  Perform data-flow analysis on a binary given an Analysis Plan. Traces taint paths or confirms CISB structural patterns such as eliminated checks or reordered operations. Produces Bug Reports with confidence scores.

• iot-bridge-agent

  Stitch per-binary bridge point records into high-order taint chains by matching IPC writers to readers across binaries, then trace the stitched path to a dangerous sink.

• iot-plan-agent

  Scan a single IoT firmware binary for taint vulnerability candidates, emphasizing IoT-specific sources (nvram_get, CGI env vars, network sockets) and bridge point writers/readers. Produces Analysis Plans and Bridge Point Records.

• plan-agent

  Scan a binary for vulnerability candidates and produce Analysis Plans — dangerous sink call sites and taint sources for taint analysis, or security-critical operations that may have been eliminated or reordered for CISB analysis.

• validate-agent

  Verify exploitability of a Bug Report and generate a PoC. Confirms or dismisses taint path findings (buffer overflow, command injection, UAF) and CISB findings (eliminated check, dead store, reordered operation).

MCP servers (1)

• clearbit

  connects to: http://localhost:3664/mcp

Language servers (1)

• clangd

Similar plugins