# Local Codex adaptation

Original author: Trail of Bits.
Source: https://github.com/trailofbits/skills/tree/442fc9d6c89b1e937e6f7a477e7071ea75fcbea4/plugins/fp-check/skills/fp-check
Upstream revision: `442fc9d6c89b1e937e6f7a477e7071ea75fcbea4`. Retrieved 2026-10-13.
License: Creative Commons Attribution-ShareAlike 4.0 International; see LICENSE.
This modified version is offered under the same license. No upstream endorsement is implied.

Changes: Replaced mandatory plugin agents/task APIs with a native checklist. Added INCONCLUSIVE instead of treating missing proof as FALSE POSITIVE. Required actual verification rather than pseudocode as reproduction; widened impact assessment to program-defined integrity, availability, economic, and AI effects; separated validity from eligibility.

Common compatibility changes: removed Claude-specific allowed-tools metadata where present; resolved
baseDir links to this installed directory; copied the skill's reference files and UI metadata only.
No plugin runtime, hook, installer, workflow script, or external agent service was installed.
Use the actual tools available in Codex; do not invent tools from upstream product terminology.

User instructions, scope rules, evidence handling, and the global AGENTS.md take precedence.
This skill is guidance, not evidence that a vulnerability exists or will receive a bounty.
