SKILL: Bug Identification

Metadata

• Skill Name: bug-identification
• Folder: offensive-bug-identification
• Source: https://github.com/SnailSploit/offensive-checklist/blob/main/bug-identification.md

Description

Systematic bug identification methodology: source code review patterns, black-box testing strategies, taint analysis, dangerous function hunting, data flow tracing, and automated scanning setup. Use for code audits, bug bounty triage, or building vulnerability identification pipelines.

Trigger Phrases

Use this skill when the conversation involves any of:
bug identification, code review, taint analysis, dangerous functions, data flow, source audit, black box, vulnerability identification, static analysis, code audit, bug hunting

Instructions for Claude

When this skill is active:

1. Load and apply the full methodology below as your operational checklist
2. Follow steps in order unless the user specifies otherwise
3. For each technique, consider applicability to the current target/context
4. Track which checklist items have been completed
5. Suggest next steps based on findings

----------------- | ----------------- | ------------------- |
| Linux Kernel | Syzkaller, AFL++ | KASAN, KCOV, ftrace |
| Windows Kernel | ICICLE, WinAFL | Verifier, KFUZZ |
| Browsers | LibFuzzer, Domato | ClusterFuzz, Dharma |
| Network Services | AFL++, Boofuzz | Peach, Sulley |
| Mobile Apps | QARK, Frida | MobSF, Objection |
| Web Apps | Burp Suite, FFUF | Nuclei, Semgrep |
| Firmware | Binwalk, EMBA | FACT, Firmwalker |
| Containers | Trivy, Falco | Grype, Syft |

By Technique

Tool Migration Path