domains / families / security / fp-check

fp-check

separate

Systematically verifies suspected security bugs to eliminate false positives, producing a TRUE POSITIVE or FALSE POSITIVE verdict with documented evidence for each. Use when asked whether a specific finding is real, exploitable, or a false positive, or to verify or validate a suspected vulnerability — not for hunting or discovering new bugs.

When to use

• "Is this bug real?" or "is this a true positive?"
• "Is this a false positive?" or "verify this finding"
• "Check if this vulnerability is exploitable"
• Any request to verify or validate a specific suspected bug

When not to use

• Finding or hunting for bugs ("find bugs", "security analysis", "audit code")
• General code review for style, performance, or maintainability
• Feature development, refactoring, or non-security tasks
• When the user explicitly asks for a quick scan without verification

Skill page

Source