---
title: "False Positive Check - Air Market"
description: "Someone reports a security bug and you do not yet know if it is real. This works through the suspected bug and comes back with a verdict - true positive or false positive - and the evidence behind it…"
canonical: "https://airmarket.ai/app/fp-check"
---

[Air Market](/) / [Security](/category/security) / False Positive Check

Skill by [Trail of Bits](/@trailofbits)

# False Positive Check

Settle whether that suspected bug is real before anyone acts on it

## What this does

Someone reports a security bug and you do not yet know if it is real. This works through the suspected bug and comes back with a verdict - true positive or false positive - and the evidence behind it. Reach for it when you need to confirm or dismiss a specific finding. It does not go looking for new bugs.

### Top 3 things it does for you

- Check whether a finding is real or a false positive
- Verify a suspected vulnerability with evidence
- Decide if a reported bug is exploitable

## Information

**False Positive Check at a glance**

|  |  |
| --- | --- |
| Kind | Skill |
| Publisher | [Trail of Bits](/@trailofbits) |
| Category | [Security](/category/security) |
| Works with | Agent Skills - an open standard supported by 40+ agents |
| Size | 42 KB |
| Licence | CC-BY-SA-4.0 |
| Repository | [trailofbits/skills](https://github.com/trailofbits/skills/tree/ff4162dcb9cec5b7abe5ab039c868544b325275d/plugins/fp-check/skills/fp-check) |
| GitHub stars | 6,823 (as of Nov 2026) |
| Installs | 7,594, counted by skills.sh (Nov 2026) |

## Security report

**Verified.** AIR scanned this exact version of False Positive Check and flagged nothing. AIR's verdict: **safe**.

**What False Positive Check's check was run against**

|  |  |
| --- | --- |
| Commit | ff4162dcb9cec5b7abe5ab039c868544b325275d |
| Content hash | ce2ee28025b32a3aa76786b4772364f5e19e07eee722ddde1e7c28262071ba70 |
| Files read | [Browse the files at this exact commit](https://github.com/trailofbits/skills/blob/ff4162dcb9cec5b7abe5ab039c868544b325275d/plugins/fp-check/skills/fp-check/SKILL.md) |

A scan is named by the exact content it read, not by a version number. A different version is a different artifact, and nothing here applies to a version AIR has not scanned.

[Read the full security report for False Positive Check](/security/fp-check)

## About False Positive Check

This systematically verifies suspected security bugs to eliminate false positives, producing a TRUE POSITIVE or FALSE POSITIVE verdict with documented evidence for each one.

Use it when asked whether a specific finding is real, exploitable, or a false positive, or to verify or validate a suspected vulnerability. It is not for hunting or discovering new bugs.

## What's inside

- SKILL.md - instructions
- agents/openai.yaml - data
- assets/trail-of-bits-mark.svg - template
- references/bug-class-verification.md - reference
- references/deep-verification.md - reference
- references/evidence-templates.md - reference
- references/false-positive-patterns.md - reference
- references/gate-reviews.md - reference
- references/standard-verification.md - reference

## Questions

### Is False Positive Check safe to install?

AIR scanned this exact version of False Positive Check and flagged nothing. AIR's verdict: safe. The verdict is named by the content that was read, at commit ff4162dcb9ce, so it cannot drift onto a version nobody scanned. The full report is at https://airmarket.ai/security/fp-check.

### How do I install False Positive Check?

Open https://airmarket.ai/app/fp-check on Air Market and use the install action: Air Market hands Claude a prompt naming this exact skill, and Claude sets it up. Source, pinned to the exact commit this listing describes: https://github.com/trailofbits/skills/tree/ff4162dcb9cec5b7abe5ab039c868544b325275d/plugins/fp-check/skills/fp-check. Install from that link, not the branch.

## Related on Air Market

- [More Security listings](/category/security)
- [Everything by Trail of Bits](/@trailofbits)

---

Canonical URL: <https://airmarket.ai/app/fp-check>