h0p3sf4ll

Fp Review — Security skill for Claude Code

Security community

Triage security scanner findings as true or false positives.

How to install Fp Review

Installs to ~/.claude/commands/h0p3sf4ll-threatlint-fp-review.md

Terminal
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/h0p3sf4ll/threatlint/HEAD/.claude/commands/fp-review.md -o ~/.claude/commands/h0p3sf4ll-threatlint-fp-review.md

Restart Claude Code, or start a new session, for it to be picked up.

What Fp Review does

description: "Triage security scanner findings as true or false positives. Generates precise Semgrep rule tuning for FPs and confirms exploit paths for TPs. Accepts a SARIF file, Semgrep JSON output, or a threatlint report." argument-hint: "Path to SARIF file, Semgrep JSON, threatlint report, or a ServiceNow AVIT number (e.g., /tmp/semgrep.json or AVIT000000095938462)"

Invoke the `appsec-fp-reviewer` agent to triage security scanner findings.

Prerequisite: Semgrep Community Edition

Alternatives in Security

  • Openclaw Ops — OpenClaw operations skill with health checks, repair scripts, watchdogs, update triage, and security scans 225 ★
  • Kali Pentest — Kali Linux penetration testing skill for AI agents (Claude Code, OpenClaw, Hermes Agent) 100 ★
  • Coding Audit — Medical-coding / revenue-cycle compliance audit 83 ★

Full documentation available on GitHub

View Source Repository

Related Skills

Audit Strict — Security skill for Claude Code

Audit Strict

Multi-pass consensus audit — runs the audit twice with different prompts, only reports consensus findings. Agg

Security community
Cpv Batch Caching Audit — Security skill for Claude Code

Cpv Batch Caching Audit

Fan out cpv-cache-optimizer-agent across every plugin in a marketplace, a list of plugins, or a single plugin.

Security community
Cpv Batch Security Audit — Security skill for Claude Code

Cpv Batch Security Audit

Fan out security-only validation across every plugin in a marketplace, a list of plugins, or a single plugin.

Security community
Threat Detection Engineer — Security skill for Claude Code

Threat Detection Engineer

Expert detection engineer specializing in SIEM rule development, MITRE ATT&CK coverage mapping, threat hunting

Security community
Token Optimizer Skill — Security skill for Claude Code

Token Optimizer Skill

Token cost optimization skill for Claude Code — model routing (Opus/Sonnet/Haiku), extended thinking tuning, p

Security community
Zorille — Security skill for Claude Code

Zorille

Four Claude Code skills for codebase hygiene: codebase-audit (find issues) + plan-fixes (turn issues into PR-s

Security community

Related Agents

Appsec Fp Reviewer — Security agent for Claude Code

Appsec Fp Reviewer

Use to adjudicate SARIF, Semgrep JSON, and security-report findings. Produces a professional evidence-based fi

Security community
Semgrep Triager — Research agent for Claude Code

Semgrep Triager

Classifies semgrep scan findings as true or false positives by reading source context. Use when triaging stati

Research community
Semgrep Scanner — Development agent for Claude Code

Semgrep Scanner

Executes Semgrep CLI scans for a specific language category and produces SARIF output. Spawned by the semgrep

Development community