post-patch-validation
> Validates security patches with reproducible baseline-versus-patched evidence, including original exploits, root-cause variants, behavior…
About
>
Validates security patches with reproducible baseline-versus-patched evidence, including
original exploits, root-cause variants, behavior preservation, regressions, and newly
introduced security failures. Use after a patch exists and before accepting, merging, or
reporting it as fixed; also use when an AI-generated patch, remediation commit, pull request,
or proposed upstream fix needs adversarial post-patch validation across any language.
allowed-tools: Read Write Edit Grep Glob Bash Workflow
What it can do
- >
- Validates security patches with reproducible baseline-versus-patched evidence, including
- original exploits, root-cause variants, behavior preservation, regressions, and newly
- introduced security failures. Use after a patch exists and before accepting, merging, or
- reporting it as fixed; also use when an AI-generated patch, remediation commit, pull request,
- or proposed upstream fix needs adversarial post-patch validation across any language.
- allowed-tools: Read Write Edit Grep Glob Bash Workflow
Setup
- Install:
npx skills add trailofbits/skills --all - The skill auto-loads when relevant, or invoke it by name in your agent.
Prerequisites
A compatible AI coding agent (Claude Code, Cursor, etc.).
Use cases
Works with
Trust score — 9/10
Trail of Bits is a top-tier security research firm; their skills are professional-grade auditing and fuzzing playbooks used by their own engineers. Open source.
Sources
Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.