claude

fp-check

Systematic false positive verification for security bug analysis with mandatory gate reviews

8,166 on GitHubby Maciej Domanskiv1.0.5CC-BY-SA-4.0updated today
/

Plugin fp-check from marketplace trailofbits in trailofbits/skills. Commands read from the repo's manifest — today.

This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.

What it installs

Skills (1)

  • fp-check

    Systematically verifies suspected security bugs to eliminate false positives, producing a TRUE POSITIVE or FALSE POSITIVE verdict with documented evidence for each. Use when asked whether a specific finding is real, exploitable, or a false positive, or to verify or validate a suspected vulnerability

Subagents (3)

  • data-flow-analyzer

    Analyzes data flow from source to vulnerability sink, mapping trust boundaries, API contracts, environment protections, and cross-references. Spawned by fp-check during Phase 1 verification.

  • exploitability-verifier

    Verifies whether a suspected vulnerability is actually exploitable by proving attacker control, mathematical bounds, and race condition feasibility. Spawned by fp-check during Phase 2 verification.

  • poc-builder

    Creates proof-of-concept exploits (pseudocode, executable, and unit tests) demonstrating a verified vulnerability, plus negative PoCs showing exploit preconditions. Spawned by fp-check during Phase 4 verification.

Hooks (2)

  • Stop
  • SubagentStop
View source on GitHub

More from trailofbits/skills

All 47 plugins →

trailmark

claude

Builds source and binary code graphs for security analysis, taint modeling with native analyzers, context slicing, mutation testing, cryptographic protocol modeling, finding triage, and variant analysis.

15 skills · 1 agent

8,166

testing-handbook-skills

claude

Skills from the Trail of Bits Application Security Testing Handbook (appsec.guide)

15 skills

8,166

zeroize-audit

claude

Detects missing or compiler-optimized zeroization of sensitive data with assembly and control-flow analysis

1 skill · 11 agents · 1 MCP server

8,166

building-secure-contracts

claude

Comprehensive smart contract security toolkit based on Trail of Bits' Building Secure Contracts framework. Includes vulnerability scanners for 6 blockchains and 5 development guideline assistants.

11 skills

8,166

regression-hunt

claude

Agent-orchestrated skills for finding, reproducing and adjudicating regressions in PRs or commits.

7 skills

8,166

dimensional-analysis

claude

Audits code for unit and decimal-scaling bugs and annotates it with dimensional comments recording the units of each value. Use when someone asks to audit or review code for unit confusion, decimals or scaling mismatches, WAD/RAY scale errors, or the wrong token's decimals; to annotate units in a codebase; or to perform a dimensional analysis of a DeFi protocol, offchain code, or other arithmetic-heavy codebase. Catches formulas that combine values carrying different units or scales.

1 skill · 5 agents

8,166

Maintain fp-check?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins47 plugins