← ClaudeAtlas

vuln-researchlisted

Use when performing security-focused vulnerability research, bug bounty hunting, penetration testing, or exploit development on a specific target codebase or binary. Covers taint analysis across 30+ attack domains, sink analysis for 10+ languages, SAST/DAST integration, agent sweep, DuckDB-persisted phase pipeline, fuzzing harness, stateful fuzzing, directed symbolic execution, history-driven fuzzing, FuzzGPT, generate edge-case test programs, differential / metamorphic oracle, continuous / perpetual / self-firing vuln discovery, keep hunting until N high/critical confirmed, patch diffing, supply chain attack surface, find me zero days, sweep everything, memory corruption, ROP, firmware audit, kernel driver. SKIP for: generic code reading, writing new features, refactoring, single-diff review without a security goal, or infra config not being audited for vulnerabilities — use code-review or a general coding skill instead.
Lu1sDV/skillsmd · ★ 2 · AI & Automation · score 66
Install: claude install-skill Lu1sDV/skillsmd
# Vulnerability Research ## v2 Pipeline — Summary The skill runs a DuckDB-persisted phase pipeline (Phases L-1 → 0 → 0.5 → 0.75 → 1.3 → 1.4 → 1 → 1.5 → 1.6 → 1.7 → 2 → 3 → 4 → 5). Every artifact — sources, sinks, defenses, critical functions, slices, findings, refutations, observations, bypasses, fuzz runs, suspicious points, round ledger — lives in a single DuckDB database keyed by stable hashes; the orchestrator is the **sole writer** (single-writer rule); swarm agents emit row-shaped JSON to an in-memory queue flushed per-lane (not per-phase) so a crash loses at most one in-flight lane. DuckDB is the sole source of truth — subagents MUST NOT write files. Schema: [`db/schema.sql`](db/schema.sql); migrations: [`db/migrations/`](db/migrations/). Run `vrdb selftest` before Phase 0. Load [`references/v2/pipeline-architecture.md`](references/v2/pipeline-architecture.md) for the full v2 pipeline spec, schema gates, row-shape invariants, workspace convention, harness put/fetch contract, environment preflight, bypass doctrine, and per-phase doctrine paragraphs. ### Mandatory DEEP Lane Roster (18 lanes) | Phase | Lane name (exact `strategies.name`) | Doc | |---|---|---| | Phase L-1 Prior-Art Intake | `prior_art_intake_lane` | `references/methodology/prior-art-intake-lane.md` | | Phase 0 Decompose | `preliminary_enumeration_lane` | `references/methodology/preliminary-enumeration-lane.md` | | Phase 1 Hunt | `forward_slice_lane` | | | Phase 1 Hunt | `backward_sink_lane` | | | Phase