trailofbits/brotli-checker is an agent skill for Claude Code and Codex that finds Brotli decoder copies and guides CVE-2026-111497 vulnerable version audits and updates. The repository's latest release is v0.2.0. The provided records contain no changelog for this version, so it cannot be confirmed what was newly added or changed. The repository was created by Trail of Bits and is released under the MIT license.
This skill finds vulnerable Brotli copies and helps with update reviews. According to the README description, it examines source code and dependencies, application packages, and container filesystems, and also checks code fingerprints of supported ELF binaries. ELF is an executable file format, and code fingerprints are used to identify library copies within binaries. The results present the evidence for each copy along with the gaps in detection coverage. The standalone scanner uses only the Python standard library, but source link analysis requires a separate tool.
Detection results alone cannot confirm whether a running application actually uses that copy, or whether an attacker can reach that copy. The results are therefore closer to evidence for identifying copies that need additional review than a final verdict on vulnerability or exploitability. Paths outside the scope may exist, so the results should not be interpreted as a complete audit of the whole environment.