Individual skill
vulnerability-root-cause-analyzer
Analyze vulnerable code to identify underlying root causes such as violated assumptions, incorrect invariants, missing validation checks, or unsafe component interactions. Use when investigating security vulnerabilities, CVEs, exploit code, or security audit findings. Infers why the vulnerability exists beyond surface symptoms, identifies systemic issues, and explains the chain of failures that enable exploitation.
skills/vulnerability-root-cause-analyzer/SKILL.md
Source commit 4f38503747e0617504bce5329283ef837d375c09
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Not checked yet
- Last checked
- Nov 6, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 260
- Repository last updated
- Aug 21, 2026
- License
- Apache-2.0
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- claude-skills Repository topic
- metaprogramming Repository topic
- software-development Repository topic
- software-engineering Repository topic
- claude Repository topic
- claude-code Repository topic
- security Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 12,505 bytesSKILL.mdcore · 12,505 bytesreferences/analysis_strategies.mddoc · 6,693 bytesreferences/root_causes.mddoc · 3,743 bytesreferences/vulnerability_patterns.mddoc · 5,198 bytes
Read excerpt
# Vulnerability Root Cause Analyzer
Analyze vulnerable code to identify the underlying root causes that enable security vulnerabilities.
## Overview
Security vulnerabilities are symptoms of deeper issues in code design and implementation. This skill analyzes vulnerable code to identify:
1. **Violated assumptions** - What the code assumes but doesn't verify
2. **Incorrect invariants** - Properties that should hold but don't
3. **Missing checks** - Validation that should exist but is absent
4. **Unsafe interactions** - How components interact unsafely
5. **Design flaws** - Architectural issues that enable vulnerabilities
