variant-analysis
A systematic five-step process for identifying and triaging vulnerability variants across a codebase.
Install
npx skills add https://github.com/trailofbits/skills --skill variant-analysisStats
| Total installs | 1,380 |
| Weekly installs | 1.4K |
| GitHub stars | 4.0K |
| First seen | Jan 19, 2026 |
| Source | @trailofbits/skills |
Summary
- Guides a five-step process: understand root cause, create exact match, identify abstraction points, iteratively generalize patterns, and analyze results with confidence/exploitability triage
- Supports ripgrep for quick searches, Semgrep for simple pattern matching, and CodeQL for cross-function data flow analysis
- Includes ready-to-use CodeQL and Semgrep templates for Python, JavaScript, Java, Go, and C++
- Highlights critical pitfalls: narrow search scope, overly specific patterns, single vulnerability class focus, and missing edge cases
Tags
Related skills
| Skill | Installs | vs variant-analysis |
|---|---|---|
| git-guardrails-claude-code | 1,575 | +195 |
| security-scan | 1,535 | +155 |
| assets | 1,304 | -76 |
| property-based-testing | 1,436 | +56 |
| xdrop | 1,460 | +80 |
FAQ
- How many installs does variant-analysis have?
- variant-analysis has 1,380 total installs and 1.4K installs this week.
- Where is variant-analysis hosted?
- variant-analysis is published by @trailofbits/skills at https://github.com/trailofbits/skills.
- How many GitHub stars does variant-analysis have?
- variant-analysis has 4.0K GitHub stars.
- When was variant-analysis first indexed?
- OrangeBot.AI first indexed variant-analysis on Jan 19, 2026.
- How do I install variant-analysis?
- Run: npx skills add https://github.com/trailofbits/skills --skill variant-analysis