Vulnerability Analysis

This is a comprehensive security auditing framework that walks you through systematic vulnerability analysis using taint tracking (marking untrusted data at entry points and following it to dangerous operations). It covers the big categories: injection flaws, memory safety bugs, auth bypasses, crypto mistakes, race conditions, and supply chain issues. The methodology is sound,start with sink-backward analysis for quick wins on high-risk operations like eval and SQL execution, then do source-forward sweeps for completeness. What's genuinely useful here is the false positive reduction checklist and the variant analysis section that teaches you to generalize each finding into a pattern and hunt for similar bugs. The source-sink mappings and taint propagation rules give you concrete patterns to look for rather than vague guidance.

GitHub stars: 280
last updated: May 28, 2026

View on GitHub

Install

$ npx -y skills add hypnguyen1209/offensive-claude --skill vulnerability-analysis --agent claude-code

Installs into .claude/skills of the current project.

Files

Vulnerability Analysis

Every vulnerability you miss is one an attacker finds first. Systematic source auditing traces untrusted data from source to sink, evaluates every sanitizer for bypass, and questions each trust-boundary assumption. This skill is the router; depth lives in references/, and every technique cluster is backed by a runnable tool in scripts/.