Skip to main content
Back to registry

ghost-validate

ghostsecurity/skills

Determine whether a security finding is a true positive or false positive. Produce a determination with supporting evidence.

Installs417
Install command
npx skills add https://github.com/ghostsecurity/skills --skill ghost-validate
Security audits
Gen Agent Trust HubPASS
SocketPASS
SnykFAIL
About this skill
Determine whether a security finding is a true positive or false positive. Produce a determination with supporting evidence. The user provides a finding as a file path or pasted text. If neither is provided, ask for one. Extract: vulnerability class, specific claim, affected endpoint, code location, and any existing validation evidence. Identify: If a live instance of the application is accessible and the vulnerability can be confirmed through live interaction, use the proxy skill to confirm exploitability: Classify the finding as one of: Output a summary in the following format: Example: If the finding was provided as a file path, ask the user if they would like to append the validation details to the original finding file. If they agree, append a ## Validation section to the file containing the determination, confidence, evidence summary, and recommendation. See VULNERABILITY_PATTERNS.md in this skill directory for patterns to look for when validating authorization flaws (BFLA/BOLA/IDOR), injection (SQLi/XSS), and authentication flaws.

Source description provided by the upstream skill listing. Community reviews and install context appear in the sections below.

Community Reviews

Latest reviews

Sign in to review

No community reviews yet. Be the first to review.

Browse this skill in context
FAQ
What does ghost-validate do?

Determine whether a security finding is a true positive or false positive. Produce a determination with supporting evidence.

Is ghost-validate good?

ghost-validate does not have approved reviews yet, so SkillJury cannot publish a community verdict.

What agent does ghost-validate work with?

ghost-validate currently lists compatibility with codex, gemini-cli, cursor, amp, github-copilot, claude-code.

What are alternatives to ghost-validate?

Skills in the same category include telegram-bot-builder, flutter-app-size, sharp-edges, iterative-retrieval.

How do I install ghost-validate?

npx skills add https://github.com/ghostsecurity/skills --skill ghost-validate

Related skills

More from ghostsecurity/skills

Related skills

Alternatives in Software Engineering