Jeden Skill in Manus ausführen
mit einem Klick

Jeden Skill in Manus mit einem Klick ausführen

Loslegen

$pwd:

sanitizer-repro

Name: Sanitizer Repro
Author: InternationalColorConsortium

// Reproduce and triage ASAN/UBSAN findings against iccDEV tools with authoritative exit-code and stack-frame handling.

In Manus ausführen

$ git log --oneline --stat

stars:162

forks:47

updated:28. Mai 2026 um 21:26

SKILL.md

readonly

name	sanitizer-repro
description	Reproduce and triage ASAN/UBSAN findings against iccDEV tools with authoritative exit-code and stack-frame handling.
allowed-tools	["bash","read","grep","glob","shell(git:*)"]

Sanitizer Reproduction

Use this skill for security advisories, crash reports, fuzzing artifacts, or manual findings involving iccDEV command-line tools.

Workflow

Build from a clean CMake cache with sanitizer flags.
Verify sanitizer linkage before claiming coverage.
Run the exact reproduction command and capture exit code plus stderr.
Classify exit codes: 0 success, 1-127 graceful failure, 128+ signal.
Attribute root cause from sanitizer stack frames, not PoC filenames.
Inspect tool argument semantics before writing a one-liner. If a tool appends channel numbers, expands prefixes, or parses config files, preserve that behavior in the command instead of copying artifacts to synthetic names.
Minimize reproduction steps while keeping them copy-pasteable. When a maintainer asks for no substitutions, the command must start with the tool binary and use literal arguments only; do not use shell variables, loops, mktemp, or copy helpers.
File or update issues using the canonical security format.

Build

cd Build && rm -rf CMakeCache.txt CMakeFiles/
CC=clang CXX=clang++ cmake Cmake -DCMAKE_BUILD_TYPE=Debug -DENABLE_TOOLS=ON -DENABLE_ASAN=ON -DENABLE_UBSAN=ON -DENABLE_INTEGER_SANITIZER=ON -DENABLE_FLOAT_SANITIZER=ON
make -j"$(nproc)"
nm Tools/IccDumpProfile/iccDumpProfile | grep -c __asan

Use CC=clang, not C=clang; after any failed compiler configure, delete both CMakeCache.txt and CMakeFiles/ before retrying. Do not enable coverage for a sanitizer reproduction because coverage instrumentation can mask findings.

References

../../prompts/reproduce-security-issue.prompt.md
../../prompts/file-security-issue.prompt.md
../../prompts/SECURITY_ISSUE_FORMAT.md
../../../docs/bisect.md
../json-config-regression/SKILL.md

related-skills.json

gleiches Repository

maintainer-ci-ctest.md

from "InternationalColorConsortium/iccDEV"

Maintainer workflow for scoping and updating iccDEV CI, CTest, CPack, sanitizer, workflow, and release-gate infrastructure.

2026-05-28162

pre-pr-security-cycle.md

from "InternationalColorConsortium/iccDEV"

Maintainer workflow for the pre-PR secure loop: code, build/test, SAST/CodeQL, dynamic sanitizer checks, fixes, and concise handoff.

2026-05-22162

regression-workflow-governance.md

from "InternationalColorConsortium/iccDEV"

Add or update iccDEV regression gates and tool-test workflow coverage while preserving GitHub Actions governance, sanitizer reporting, and issue traceability.

2026-05-22162

maintainer-label-system.md

from "InternationalColorConsortium/iccDEV"

Maintain iccDEV repository labels, path labeler rules, issue triage labels, PR CI status labels, and label workflow governance.

2026-05-16162

vcpkg-export-consumer-debug.md

from "InternationalColorConsortium/iccDEV"

Debug iccDEV vcpkg, install/export, uninstall, and packaged consumer failures, especially Windows static CRT and path quoting regressions.

2026-05-12162

docs-maintenance.md

from "InternationalColorConsortium/iccDEV"

Review and edit iccDEV documentation for signal, accuracy, canonical ownership, and low-noise handoff.

2026-04-28162

package.json

"author": "InternationalColorConsortium"

"repository": "InternationalColorConsortium/iccDEV"

GitHub-Repository öffnen Creator-Repositorys ansehen

$ install --global

$ download --local

In Manus ausführen

$ useful --forSOC

Softwarequalitätssicherungsanalysten und -testerInformatik- und Mathematikberufe15-1253L4

name	sanitizer-repro
description	Reproduce and triage ASAN/UBSAN findings against iccDEV tools with authoritative exit-code and stack-frame handling.
allowed-tools	["bash","read","grep","glob","shell(git:*)"]

Sanitizer Reproduction

Use this skill for security advisories, crash reports, fuzzing artifacts, or manual findings involving iccDEV command-line tools.

Workflow

Build from a clean CMake cache with sanitizer flags.
Verify sanitizer linkage before claiming coverage.
Run the exact reproduction command and capture exit code plus stderr.
Classify exit codes: 0 success, 1-127 graceful failure, 128+ signal.
Attribute root cause from sanitizer stack frames, not PoC filenames.
Inspect tool argument semantics before writing a one-liner. If a tool appends channel numbers, expands prefixes, or parses config files, preserve that behavior in the command instead of copying artifacts to synthetic names.
Minimize reproduction steps while keeping them copy-pasteable. When a maintainer asks for no substitutions, the command must start with the tool binary and use literal arguments only; do not use shell variables, loops, mktemp, or copy helpers.
File or update issues using the canonical security format.

Build

cd Build && rm -rf CMakeCache.txt CMakeFiles/
CC=clang CXX=clang++ cmake Cmake -DCMAKE_BUILD_TYPE=Debug -DENABLE_TOOLS=ON -DENABLE_ASAN=ON -DENABLE_UBSAN=ON -DENABLE_INTEGER_SANITIZER=ON -DENABLE_FLOAT_SANITIZER=ON
make -j"$(nproc)"
nm Tools/IccDumpProfile/iccDumpProfile | grep -c __asan

References

../../prompts/reproduce-security-issue.prompt.md
../../prompts/file-security-issue.prompt.md
../../prompts/SECURITY_ISSUE_FORMAT.md
../../../docs/bisect.md
../json-config-regression/SKILL.md

sanitizer-repro

Sanitizer Reproduction

Workflow

Build

References

Mehr aus diesem Repository

Mehr aus diesem Repository

Sanitizer Reproduction

Workflow

Build

References