Test & debugCC-BY-SA-4.0

Post-patch validation

by Trail of Bits (opens in a new tab) trailofbits/skills

Validates a security patch with pinned baseline, exploit, variant, behavior, and regression evidence.

Installation

Skills CLI

Skills CLI command
npx skills@latest add trailofbits/skills --skill post-patch-validation

Requires Node.js and npm. Choose your agents in the installer; add -g for a global installation.

Fieldbook review

Reviewed 27 Sept 2026

Uses a uv-driven Python runner and isolated Git worktrees to validate a structured plan, preserve logs, and distinguish findings from evidence gaps. It runs local code with the caller's privileges, rejects remote or production targets, requires execution authorization, and still leaves acceptance to human review.

  • LicenceCC-BY-SA-4.0
  • FrontmatterValid name and description
  • Risky patternsNone found
  • Size262 lines
  • Last checked27 Sept 2026 · 33b604f4d7d62eab393d710edb98b18505fcbe079c07c9428daa018f29439b54

What it can touch

  • Edits code

    Changes files in your project.

  • Writes docs

    Creates or updates documents such as specs, plans or ADRs.

  • Runs commands

    Runs shell commands such as tests, builds or installs.

  • Uses git

    Reads history or makes commits, branches or worktrees.

  • Subagents

    Starts other agents to work in parallel.

Read the source

Fieldbook links to the original instead of copying it, so you always read the version you install.

plugins/post-patch-validation/skills/post-patch-validation/SKILL.md on GitHub (opens in a new tab)