--- title: "Exploitability verifier: review, role & definition · Undominated.ai" canonical: https://undominated.ai/agents/trailofbits-exploitability-verifier/ description: "Pins the fp-check phase-2 agent that stays read-only while deciding whether a suspected bug is exploitable, and that skips a proof the bug class does not need." --- # Exploitability verifier: review, role & definition · Undominated.ai > Pins the fp-check phase-2 agent that stays read-only while deciding whether a suspected bug is exploitable, and that skips a proof the bug class does not need. [← Explore all agents](/agents/) SECURITY REVIEW / Trail of Bits # Exploitability verifier Pins the fp-check phase-2 agent that stays read-only while deciding whether a suspected bug is exploitable, and that skips a proof the bug class does not need. [Use this definition ↓](#setup)[Original source ↗](https://github.com/trailofbits/skills/tree/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/fp-check/agents) SOURCE REVIEW Reviewed 2026-10-14 Evidence 4 linked sources Publisher Trail of Bits Licence [CC-BY-SA-4.0 ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/LICENSE) Revision 8e54050ae63c [Read what was—and wasn’t—checked ↓](#review) “Read-only check of whether a reported bug is exploitable, without assuming control or applying a bounds or race proof to the wrong class.” [Trail of Bits · upstream description ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/fp-check/agents/exploitability-verifier.md) Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - The agents catalogue has no sourcePath for plugins/fp-check/agents/exploitability-verifier.md. - The file says the agent is read-only, refuses to assume attacker control, and skips the bounds or race sub-phase when that bug class does not apply. ### A good fit for - A second, non-editing pass over one fp-check data-flow result when the question is whether the reported condition can occur ### Weigh up before choosing - This review did not execute the resource. - A Markdown profile does not register a native subagent by itself. - The install command installs the fp-check plugin, which ships this agent with the rest of that plugin, not this file alone. - The file asks for a triggering value and an attack scenario when it calls a condition possible. This record does not publish that procedure. - The read-only sentence is an instruction. This review did not check whether the host withholds Write or Bash. - Phase 1 output was not supplied, and the sibling phase agents were not opened. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - plugins/fp-check/agents/exploitability-verifier.md - plugins/fp-check/README.md - README.md - LICENSE ### Our findings - The body says the agent is read-only. The tool list is Read, Grep, and Glob. - It says never to assume attacker control without tracing who can supply the data, including data that only a privileged component writes. - It says to skip the bounds sub-phase when the issue is not a bounds issue, and to skip the race sub-phase when the issue is not a concurrency issue. - It says to separate mathematically impossible, practically infeasible, and feasible, and the conclusion is exploitable or not exploitable with a reason. ### Not established by this review - The resource was not executed and its tools were not called. - No phase-1 analysis was supplied. - No triggering value or attack scenario was produced. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Use the role in your project. [Upstream setup instructions ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/fp-check/README.md) DOCUMENTED COMMAND /plugin install fp-check Copy command ↗ Copying does not execute this command. It may retrieve a newer version than the reviewed source. - The fp-check README prints that line with no leading spaces under Installation. - That line installs the fp-check plugin. It does not name this agent. - The repository README's marketplace line adds the marketplace, not this agent, so it is not install.command. ### Before you start - Claude Code or Codex marketplace support, which the repository README states - The fp-check dispatch that spawns this agent ### Compatibility Claude Code · OpenAI Codex ### Read-only exploitability decision for one dispatched bug - Read and search the tree the dispatch names - Does not list Write, Edit, or Bash - The file says the agent is read-only and does not tell it to write an exploit file ### Cost model CC-BY-SA-4.0; no price is stated for this agent, and it was not run 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - [exploitability-verifier ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/fp-check/agents/exploitability-verifier.md) Checked 2026-10-14 https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/fp-check/agents/exploitability-verifier.md Supports: read-only rule, no assumed control, and skipped inapplicable proofs - [Repository root LICENSE ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/LICENSE) Checked 2026-10-14 https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/LICENSE Supports: Attribution-ShareAlike 4.0 International - [fp-check README ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/fp-check/README.md) Checked 2026-10-14 https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/fp-check/README.md Supports: plugin install line and phase-2 description of this agent - [Repository README ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/README.md) Checked 2026-10-14 https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/README.md Supports: CC-BY-SA-4.0 statement and marketplace install line KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### Adversarial modeler ↗ Pins Trail of Bits' differential-review agent that models high-risk changes and says not to run on low or medium risk diffs.](/agents/trailofbits-adversarial-modeler/)[### Rust review FP judge ↗ Pins the rust-review judge that runs after dedup, aborts when it cannot obtain a finding list, and must not invent the SARIF file.](/agents/trailofbits-rust-review-fp-judge/)[### Rust review worker ↗ Pins the rust-review worker that aborts a malformed or primer spawn, writes findings only inside its scope root, and does not filter them by severity.](/agents/trailofbits-rust-review-worker/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)[Workflows ↗](/workflows/) ## Continue your investigation - [Find reusable instructions](/skills/) - [Inspect connections](/mcp-servers/) - [Build a toolkit](/tools/) - [Choose the model](/compare/)