prismers/clearbit-plugin (cisb-bug-detection)

Detect compiler-introduced security bugs (CISB) in an ELF binary using ClearBit IR analysis. CISB are vulnerabilities created by correct compiler optimizations — dead store elimination removing secret scrubs, null-check elimination via no-UB assumptions, signed-overflow check removal, reordering of security-critical operations, uninitialized padding leaks, and Spectre-class speculative-execution hazards. Use this skill whenever the user asks to find CISB, compiler-introduced bugs, dead store elimination issues, sensitive data scrubbing problems, undefined behavior security issues, or asks "did the compiler introduce a bug here". Also trigger on: "check if memset was optimized away", "find DSE vulnerabilities", "look for null-check elimination", "scan for UB-related security bugs", or any mention of the CISB taxonomy (ISpec, OSpec, DSE, timing side-channel from compiler). Orchestrates Plan, Analyze, and Validate agents using the CISB taxonomy from the USENIX Security '23 paper.

Claude Skills are markdown + scripts loaded into Claude Code; scanned with the same pipeline.

Source:

github.com/prismers/clearbit-plugin

Provenance:

Found by crawling (provenance, not a security rating)

We found this by crawling public sources and nobody has attested to it. That is how most of the registry gets here, and it is not a mark against the artifact — it only means no authenticated act of publication is on record. An artifact can be the vendor's own and still appear here.