# variant-analysis

Find similar vulnerabilities and bugs across codebases using pattern-based analysis

- **Kind:** plugin (installs as one bundle)
- **Owner:** trailofbits
- **Source:** https://github.com/trailofbits/skills (`plugins/variant-analysis`)
- **Pinned commit:** `d3323cefbcf645678b8dc481de204b02ad3d02dc`
- **Page:** https://forefy.com/plugins/70dab710-b0f2-5357-93cf-845c2af5f9ce
- **API (JSON):** https://forefy.com/api/asr/plugins/70dab710-b0f2-5357-93cf-845c2af5f9ce

## Install

Ask your agent: `Install the variant-analysis plugin securely from: https://forefy.com/plugins/70dab710-b0f2-5357-93cf-845c2af5f9ce globally to ~/.claude/skills`

Or run the pinned install script: `curl -fsSL https://forefy.com/api/asr/plugins/70dab710-b0f2-5357-93cf-845c2af5f9ce/install | bash` (`?location=project` for the current project, `&shell=powershell` with `irm ... | iex`; `harness=agents` prints the Codex commands).

## Skills in this plugin (2)

- [variant-analysis](https://forefy.com/skills/d06e61e3-51e9-49e3-a12b-88c206d2e976): Hunts for the other instances of a bug already found — the variants of one root cause across a codebase. Use immediately after a vulnerability, logic bug, or b…
- [variants](https://forefy.com/skills/d05e29a6-70de-40b7-b98a-fa6ec3f6b678): Hunt for variants of a known bug: root cause, baseline gate, parallel sweep across expansion axes, adversarial triage, report