# Prove Patch

Use when a local security patch commit needs independent scoped and three-arm proof.

- Repository: https://github.com/trailofbits/skills (7935 stars)
- Category: Security
- License: CC-BY-SA-4.0
- Last updated: 2026-10-28
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add trailofbits/skills --skill prove-patch -g -a claude-code -y`
Codex: `npx skills add trailofbits/skills --skill prove-patch -g -a codex -y`
Cursor: `npx skills add trailofbits/skills --skill prove-patch -g -a cursor -y`
Gemini CLI: `npx skills add trailofbits/skills --skill prove-patch -g -a gemini-cli -y`
Claude Code plugin marketplace: `/plugin marketplace add trailofbits/skills`

## Description

Use when a local security patch commit needs independent scoped and three-arm proof.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# Prove Patch

Use the original baseline, final patch commit, declared `repair_scope`, and unchanged
reproduction package. Read the [record contract](../../references/records.md). Do not
edit the patch or validate an uncommitted tree. Return failures for a new attempt.
Before target commands, follow its [project guidance](../../references/records.md#project-guidance).

The rest: https://github.com/trailofbits/skills/blob/HEAD/plugins/patching-bugs/skills/prove-patch/SKILL.md