Find similar vulnerabilities and bugs across codebases using pattern-based analysis. Use when hunting bug variants, building CodeQL/Semgrep queries, analyzing security vulnerabilities, or performing systematic code audits after finding an initial issue.
Install
npx skills add trailofbits/skills --skill variant-analysisnpx skills add trailofbits/skills --skill variant-analysis -a claude-code -gnpx skills add trailofbits/skills --skill variant-analysis -a codex -ggemini skills install https://github.com/trailofbits/skills.git --path plugins/variant-analysis/skills/variant-analysisgh skill install trailofbits/skills variant-analysisgit clone --depth 1 https://github.com/trailofbits/skills /tmp/trailofbits__skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/trailofbits__skills/plugins/variant-analysis/skills/variant-analysis ~/.claude/skills/variant-analysis # Claude Code
cp -R /tmp/trailofbits__skills/plugins/variant-analysis/skills/variant-analysis ~/.agents/skills/variant-analysis # Codex, Cursor, Gemini CLI, Copilot, OpenCode