Variant Analysis Skill

Trit: -1 (MINUS) Category: variant-analysis Author: Trail of Bits Source: trailofbits/skills License: AGPL-3.0

Description

Find similar vulnerabilities and bugs across codebases using pattern-based analysis. Use when hunting bug variants, building CodeQL/Semgrep queries, analyzing security vulnerabilities, or performing systematic code audits after finding an initial issue.

When to Use

This is a Trail of Bits security skill. Refer to the original repository for detailed usage guidelines and examples.

See: https://github.com/trailofbits/skills

Related Skills

• audit-context-building
• codeql
• semgrep
• variant-analysis

SDF Interleaving

This skill connects to Software Design for Flexibility (Hanson & Sussman, 2021):

Primary Chapter: 4. Pattern Matching

Concepts: unification, match, segment variables, pattern

GF(3) Balanced Triad

variant-analysis (−) + SDF.Ch4 (+) + [balancer] (○) = 0

Skill Trit: -1 (MINUS – verification)

Connection Pattern

Pattern matching extracts structure. This skill recognizes and transforms patterns.