Fp Check

fp-check

A Claude Code plugin that enforces systematic false positive verification when verifying suspected security bugs.

Overview

When Claude is asked to verify suspected security bugs, this plugin activates a rigorous per-bug verification process. Bugs are routed through one of two paths:

undefined

Both paths end with six mandatory gate reviews. Each bug receives a **TRUE POSITIVE** or **FALSE POSITIVE** verdict with documented evidence.

Installation

/plugin install fp-check

Components

Skills

Skill	Description
fp-check	Systematic false positive verification for security bug analysis

Agents

Agent	Phases	Description
data-flow-analyzer	1.1–1.4	Traces data flow from source to sink, maps trust boundaries, checks API contracts and environment protections
exploitability-verifier	2.1–2.4	Proves attacker control, creates mathematical bounds proofs, assesses race condition feasibility
poc-builder	4.1–4.5	Creates pseudocode, executable, unit test, and negative PoCs

Hooks

Hook	Event	Purpose
Verification completeness	Stop	Blocks the agent from stopping until all bugs have completed all 5 phases, gate reviews, and verdicts
Agent output completeness	SubagentStop	Blocks agents from stopping until they produce complete structured output for their assigned phases

Reference Files

File	Purpose

...