Undominated.ai
← Explore all agents

SECURITY REVIEW / Trail of Bits

Adversarial modeler

Pins Trail of Bits' differential-review agent that models high-risk changes and says not to run on low or medium risk diffs.

Use this definition ↓Original source ↗

“Activates only for high-risk changes, requires a concrete impact for each finding, and declares Read, Grep, Glob, and Bash.”

01 / THE REASONING

Why this made the selection.

  • The catalogue has the differential-review skill and not this adversarial-modeler agent.
  • The file limits itself to high-risk changes and says greenfield code without a baseline is out of scope.

02 / THE REVIEW RECORD

What we actually inspected.

Source review has boundaries.
A clear record is more useful than a “safe” badge.

Material inspected

  • plugins/differential-review/agents/adversarial-modeler.md
  • README.md
  • LICENSE
  • Round 2: pinned definition, output contract and permission/dependency boundaries reread on 2026-10-14
  • plugins/differential-review/skills/differential-review/adversarial.md (selected input/output and dependency-contract sections; not a full implementation audit)
  • plugins/differential-review/skills/differential-review/methodology.md (selected input/output and dependency-contract sections; not a full implementation audit)

Our findings

  • The agent says every finding needs a concrete impact and that vague warnings are not findings.
  • It says to activate for high-risk changes such as auth, cryptography, external calls, value transfer, weaker validation, or access-control changes, and not for low or medium risk, docs, tests, or formatting.
  • Its tools are Read, Grep, Glob, and Bash. The plugin LICENSE path returns 404 at this commit; the root license is CC-BY-SA-4.0.
  • The role is scoped to high-risk differential review and rejects greenfield work lacking a baseline.
  • It cross-checks changed behavior against existing trust boundaries, invariants and git history before calling something a regression.

Not established by this review

  • The resource was not executed and its tools were not called.
  • The linked methodology files were not opened.
  • No repository diff was reviewed with this agent.

The review applies to the material and revision named here. A newer upstream release can change its behavior.

03 / PUT IT TO WORK

Use the role in your project.

Upstream setup instructions ↗

DOCUMENTED COMMAND

/plugin marketplace add trailofbits/skills

Copying does not execute this command. It may retrieve a newer version than the reviewed source.

  1. The README's Claude Code install starts with the command above and then /plugin menu.
  2. The marketplace table names differential-review as the security-focused diff plugin. This review did not install it.
  3. Codex instructions in the same README use codex plugin marketplace add trailofbits/skills and a placeholder plugin name.
  4. Supply the matching differential-review references, bound git/source access and independently reproduce a claimed exploit in an authorized test environment.

Before you start

  • Claude Code or Codex marketplace support
  • A git baseline if the agent is used as written

04 / FOLLOW THE EVIDENCE

The source trail.

Our notes are separate from the original resource.
Check upstream before adopting a new version.

  1. adversarial-modeler ↗Checked

    https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/differential-review/agents/adversarial-modeler.md

    Supports: scope, tool list, and when not to use

  2. Repository README ↗Checked

    https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/README.md

    Supports: marketplace install line and CC-BY-SA-4.0 statement

  3. Repository LICENSE ↗Checked

    https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/LICENSE

    Supports: Attribution-ShareAlike 4.0 International

  4. Pinned inspected source: plugins/differential-review/skills/differential-review/adversarial.md ↗Checked

    https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/differential-review/skills/differential-review/adversarial.md

    Supports: Dependency setup and source-review boundary

  5. Pinned inspected source: plugins/differential-review/skills/differential-review/methodology.md ↗Checked

    https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/differential-review/skills/differential-review/methodology.md

    Supports: Dependency setup and source-review boundary

KEEP COMPARING

Related by category or shared topics. These are alternatives to inspect, not a measured quality order.

Exploitability verifier

Pins the fp-check phase-2 agent that stays read-only while deciding whether a suspected bug is exploitable, and that skips a proof the bug class does not need.

Rust review FP judge

Pins the rust-review judge that runs after dedup, aborts when it cannot obtain a finding list, and must not invent the SARIF file.

Rust review worker

Pins the rust-review worker that aborts a malformed or primer spawn, writes findings only inside its scope root, and does not filter them by severity.

Evidence & Ask
Markdown for LLMs