domains / families / security / vuln-repro

vuln-repro

separate

End-to-end methodology for reproducing AND patching publicly disclosed, already-fixed vulnerabilities: sourcing the advisory and the fix commit, reading the patch diff, rebuilding a pinned offline lab, building a vulnerable-vs-patched contrast harness with proper controls, minimizing the trigger, designing and validating the fix, and writing it up as a blog post or whitepaper. Use this skill whenever the user wants to reproduce, demonstrate, understand, teach, or write about a known vulnerability or security incident: "reproduce this CVE", "build a repro for", "how did EchoLeak / Log4Shell / the postmark-mcp package actually work", "show me how this exploit worked", "write a blog post about this vulnerability", "set up a lab for CVE-XXXX", "pull the NVD/CVE/OSV details", or "make a PoC I can publish". Use it just as eagerly for the patching half: "how should this be fixed", "is this patch correct", "what would have caught this", "review this security fix", "write a regression test for…

When to use

• reproducing disclosed vulnerabilities
• patching already-fixed issues
• building offline labs
• designing contrast harnesses
• minimizing triggers
• validating fixes
• writing blog posts or whitepapers
• reviewing security fixes

When not to use

• zero-day discovery
• live targets
• weaponization
• fuzzing for new bugs
• chaining exploits
• variant hunting against unfixed code
• bypassing unfixed controls
• unpatched issues

Skill page

Source