About
The Variant Analysis skill enables security researchers and developers to perform exhaustive bug hunting by identifying 'variants' of a known vulnerability throughout a repository. By following a rigorous five-step methodology—moving from an exact code match to an abstracted semantic pattern—this skill helps uncover hidden instances of a bug that simple searches might miss. It provides strategic guidance on when to use tools like ripgrep, Semgrep, and CodeQL, ensuring that once a root cause is identified, it is completely eradicated across the entire codebase rather than just patched in a single location.
