Customize Vuln Pipeline
Adapts a C and C++ ASAN vulnerability pipeline to another target class.
Install
npx skills add anthropics/defending-code-reference-harness --skill customize -g -a claude-code -y- Repository
- anthropics/defending-code-reference-harness7.7k
- Category
- Security
- Updated
- 3mo ago
- License
- See repository
- Context cost
- Mediumabout 3,000 tokens
- Runs scripts
- No, instructions only
What it does
Adapt this C/C++ ASAN vulnerability pipeline to a different vulnerability class, target shape, language, or detection mechanism. Use when the user wants to port, migrate, retarget, customize, or fork the pipeline for something other than C/C++ memory-safety bugs, web apps, smart contracts, deserialization, ML systems, or any other domain.
Customize the vuln-pipeline
This pipeline ships as an opinionated C/C++ + AddressSanitizer demo. Its real shape is more general: an agent crafts an input, runs a target in a sandbox, a detector fires, a second agent verifies, a third agent analyzes exploitability. Every noun in that sentence can be swapped. Your job is to interview the user, figure out which nouns they want to swap, and rewrite the relevant files.
The existing C/C++ code is the worked example. You don't need a playbook for each domain, read what's there, understand what's generic vs. ASAN-specific, and adapt.
STEP 1, Read the pipeline (do this BEFORE asking anything)
Skim these files so your questions are grounded:
README.md, pipeline overview (recon → find → grade → judge → report)harness/cli.py, orchestration; shows how stages wire together and what lands on diskharness/find.py,harness/grade.py,harness/report.py, the three container-agent loops; mostly generic plumbingharness/prompts/find_prompt.py,harness/prompts/grade_prompt.py, the C/C++-specific parts; bug taxonomy, quality tiers, grading rubricharness/prompts/report_prompt.py,harness/prompts/report_grader_prompt.py, also C/C++-specific; exploitability sections (primitive, heap layout, escalation path) and the rubric that scores themharness/prompts/judge_prompt.py, triage prompt; keys on ASAN excerpts and memory-safety crash classesharness/prompts/system_prompt.py, authorization block; hard-codes "C/C++ target" and "sanitizer output"harness/asan.py, stack-trace parser for dedup/judge signatures; ASAN-specific regexharness/artifacts.py,CrashArtifact,GraderVerdict,JudgeVerdict,ReportVerdictdata contractsharness/config.py,targets/drlibs/config.yaml, target config schematargets/README.md, how a target directory is structured (Dockerfile + config.yaml + entry wrapper)
