agentic-security:security-tutor

Security findings during triage are best understood by identifying the Source, Sink, and Sanitizer. The Socratic dialogue method walks you through these interactions step-by-step, explaining the underlying risk context before addressing any remediation steps.

Taint analysis tracks how untrusted data flows from a Source to a dangerous Sink, potentially mitigated by a Sanitizer. Understanding this interaction reveals why a finding is dangerous, building intuition about vulnerability patterns rather than just applying rote fixes.

To explain a security finding to engineering teams, use a structured Socratic walkthrough. This approach requires identifying the Source, Sink, and Sanitizer, and enforces a stepwise explanation of the risk narrative to build deeper comprehension.

This security learning approach focuses on contextual risk explanation rather than immediate fixes. It enforces a stepwise walkthrough of the vulnerability's underlying mechanisms and requires full comprehension of the risk narrative before providing any remediation steps.

You need a Socratic walkthrough for vulnerability triage when teams require deeper comprehension of findings. It is ideal for code reviews, incident triage, and training scenarios where engineers ask why a specific finding is dangerous or seek its contextual risk narrative.