anthropics/defending-code-reference-harness
9 skills
$npx skills add anthropics/defending-code-reference-harnessSkillInstalls
customizeAdapt this C/C++ ASAN vulnerability pipeline to a different vulnerability class, target shape, language, or detection mechanism. Use when the user wants to port, migrate, retarget, customize, or fork dnr-huntProactive threat hunt over web/application logs — no alert indnr-respondIncident response workup for a lead in hand — an alert, an IOC,patchGenerate candidate fixes for verified security findings. ConsumesquickstartThe front door for this repo. With no argument: a 30-second intro, then an offer to walk you through your first run on the canary target. With a question: answers it from this repo's own docs and sourthreat-modelBuild a threat model for a target codebase. Three modes: "interview" walks an application owner through the four-question framework and produces a threat model from their answers; "bootstrap" derives triageTriage a batch of raw security findings. Verify each is real,verifyVerify harness changes end-to-end without docker — drive the real pinned CLI against a header-capturing stub server with the exact env resolve_auth_env() produces.vuln-scanStatic source-code vulnerability scan. Reads a target directory (and THREAT_MODEL.md if present), spawns parallel review subagents per focus area, and writes VULN-FINDINGS.json + .md for /triage to co