Cybersecurity
Vulnerability Triage Brocards
This skill should be used when the user asks to "triage a vulnerability report", "assess a CVE", "evaluate a bug bounty submission", "decide if a finding is valid", "review a security finding", "dismiss a vulnerability", "should we fix this CVE", "prioritize a vulnerability report", or needs to determine whether an incoming vulnerability report warrants investigation. Applies 7 brocards (rules of thumb) to systematically accept, dismiss, or request more information on vulnerability reports, or needs to filter raw findings from agentic vulnerability discovery pipelines before human review.
- Publisher / source
- trailofbits/skills (found on skills.sh, an awesome list, the CSV list)
- Upstream record
- trailofbits/skills
- Version
- Version 2
- Published
- Publication review
- Approved for publication
- Content fingerprint
b033c02d83f65b19b96c79e70fbf7cee58e51c8cbdd8f81d907ad2351a1433db