Exploitability Verifier — Development agent for Claude Code
Verifies whether a suspected vulnerability is actually exploitable by proving attacker control, mathematical bounds, and race condition feasibility.
How to install Exploitability Verifier
Installs to ~/.claude/agents/brandyn-s-claude-harness-exploitability-verifier.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/brandyn-s/claude-harness/HEAD/agents/exploitability-verifier.md -o ~/.claude/agents/brandyn-s-claude-harness-exploitability-verifier.md Restart Claude Code, or start a new session, for it to be picked up.
What Exploitability Verifier does
name: exploitability-verifier description: Verifies whether a suspected vulnerability is actually exploitable by proving attacker control, mathematical bounds, and race condition feasibility. Spawned by fp-check during Phase 2 verification. model: inherit color: yellow tools:
- Read
- Grep
- Glob
Exploitability Verifier
You determine whether a suspected vulnerability is actually exploitable, given the data flow analysis from Phase 1. You produce mathematical proofs, attacker co
Alternatives in Development
- TypeScript Advanced Types — Comprehensive guidance for mastering TypeScript's advanced type system including generics, condition 31.9k ★
- Exploitability Validator Agent 2.3k ★
- Business Logic — Business Logic vulnerability specialist (H1 #28, CWE-840/841/639/362) 812 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Doey Platform Expert
Platform systems specialist — tmux IPC, bash 3.2 portability, macOS process lifecycle, race condition preventi
Trisakion Agent Router
커밋 diff를 보고 trisakion-sp-convention-validator/trisakion-table-convention-validator/trisakion-table-lock-order-
Trisakion Race Condition Checker
상태를 변경하는 SP/API의 쓰기 지점을 동시성·멱등성·상태전이 세 관점(trisakion-dev-convention-skill 5장 본문/6.1)에서 독립적으로 점검한다. 새 SP를 작성했거나
Sstack Concurrency Attacker
Concurrency lens attacker. Attacks every mapped surface for parallel race conditions, TOCTOU windows, double-s
File Attacker
ファイル関連脆弱性検出エージェント。A01 Broken Access Control + A03 Injection。
Safety Guardian
PROACTIVELY use this agent for comprehensive safety mechanisms ensuring acceptable operation bounds. Specializ
Related Skills
Dependabot Alert Review Skill
Claude Code skill that triages Dependabot vulnerability alerts before a fix PR exists, checking real exploitab
Al Debug
Root-cause a bug/test failure/race condition before fixing; checks and maintains a project-local known-issues
Claude Code Config Dir Patcher VSCode
This VS Code extension lets you run multiple Claude Code accounts by patching Anthropic's anthropic.claude-cod