Systematically verifies suspected security bugs to eliminate false positives, producing a TRUE POSITIVE or FALSE POSITIVE verdict with documented evidence for each. Use when asked whether a specific finding is real, exploitable, or a false positive, or to verify or validate a suspected vulnerability — not for hunting or discovering new bugs.
Install
npx skills add trailofbits/skills --skill fp-checknpx skills add trailofbits/skills --skill fp-check -a claude-code -gnpx skills add trailofbits/skills --skill fp-check -a codex -ggemini skills install https://github.com/trailofbits/skills.git --path plugins/fp-check/skills/fp-checkgh skill install trailofbits/skills fp-checkgit clone --depth 1 https://github.com/trailofbits/skills /tmp/trailofbits__skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/trailofbits__skills/plugins/fp-check/skills/fp-check ~/.claude/skills/fp-check # Claude Code
cp -R /tmp/trailofbits__skills/plugins/fp-check/skills/fp-check ~/.agents/skills/fp-check # Codex, Cursor, Gemini CLI, Copilot, OpenCode