Variant Analysis: Locate a Bug and Eliminate All Similar Ones

Trail of Bits’ variant-analysis has turned the daily variant analysis work of security engineers into an Agent Skill: after confirming a vulnerability, it extracts the root cause, calibrates with precise patterns, searches the entire codebase while relaxing only one condition at a time, and finally triages and leaves CI rules. This article explains the five-step workflow, the selection of ripgrep, Semgrep and CodeQL, as well as the installation and invocation methods of Claude Code, Codex and Cursor, based on the official SKILL.md, plugin README and policy documents.