aist-finding-triage

Classify AIST pipeline findings as True Positive or False Positive with evidence.

Updated Aug 31, 2025
One-click install
npx skills add https://github.com/aist-ai-sast/aist --skill aist-finding-triage
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aist-finding-triage
Source: https://github.com/aist-ai-sast/aist/tree/main/.claude/skills/aist-finding-triage
Command: npx skills add https://github.com/aist-ai-sast/aist --skill aist-finding-triage

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Classify new AIST pipeline findings as True Positive or False Positive and generate AISTAIFindingResponse payloads with supporting evidence and reproduction steps.

Core Features & Use Cases

  • Automated triage of pipeline findings to label them as True Positive or False Positive with clear evidence links.
  • Generation of standardized AISTAIFindingResponse payloads that include evidence, reproduction steps, and status annotations for auditability.
  • Seamless integration with downstream triage workflows and dashboards for faster decision-making.

Quick Start

Run the skill on your pipeline findings to produce labeled results with evidence and reproduction steps.

Frequently Asked Questions about aist-finding-triage

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I classify security findings as true positive or false positive with evidence?

To classify security findings with evidence, you can run an automated triage process on your pipeline results to label them as True Positive or False Positive and generate supporting evidence links for auditability.

What is the best way to generate reproduction steps for security analysis findings?

Generating reproduction steps for security analysis findings is done by processing pipeline results to produce standardized AISTAIFindingResponse payloads that include detailed reproduction instructions and status annotations.

How does automated triage work for new pipeline findings?

Automated triage works by evaluating new pipeline findings against criteria to determine their validity, automatically labeling them as True Positive or False Positive while attaching clear evidence and reproduction steps.

Can I use automated finding classification with downstream triage workflows and dashboards?

Yes, you can use automated finding classification with downstream triage workflows and dashboards. The process generates standardized AISTAIFindingResponse payloads to support seamless integration and faster decision-making.

Do I need a specific schema to annotate finding statuses and evidence?

Yes, you need the AISTAIFindingResponse schema to annotate finding statuses and evidence. The classification process conforms to this schema by explicitly including evidence, reproduction steps, and status annotations in the output payload.

Why does classifying pipeline findings manually slow down security analysis?

Classifying pipeline findings manually slows down security analysis because it requires individual review of each alert to determine validity, whereas automated triage supports fast decision-making by instantly providing evidence and reproduction steps.