Validate and correct audit-2-scan vulnerability findings in post-scan review workflows.
npx skills add https://github.com/freire19/Mythos --skill audit-3-review
Please help me install this Agent Skill. Skill: audit-3-review Source: https://github.com/freire19/Mythos/tree/main/skills/audit-3-review Command: npx skills add https://github.com/freire19/Mythos --skill audit-3-review
It prevents wasted effort and incorrect remediation by validating each reported vulnerability from a previous code audit, removing false positives, and correcting severity or fix quality.
Ask the agent to run audit-3-review after audit-2-scan has produced files 01-07 in docs/audits/temp/.
High-intent search queries and answers about installing and using this skill.
Static analysis false positives are validated by contra-verifying each reported vulnerability to confirm it is a real bug, checking the proposed fix for new issues, and adjusting severity levels in a structured markdown review report.
Finding missed vulnerabilities requires performing targeted gap discovery for cross-module interactions, deployment configuration risks, and transitive dependency issues beyond the initial scan output to ensure comprehensive security coverage.
Severity levels and fix quality can be corrected by rechecking every issue from the prior scan, verifying the proposed remediation does not introduce new issues, and adjusting the severity level to match the actual risk.
A post-scan vulnerability review requires detecting expected scan artifacts numbered 01-07 plus a 00_setup.md file located in the docs/audits/temp/ directory to validate findings and generate a deterministic report.
A structured code auditing report is generated by saving a markdown file covering discarded false positives, severity adjustments, corrected fixes, newly found problems, and declared blind spots to the docs/audits/temp/ directory.
freire19Audit code defects and vulnerabilities across seven categories with CVE reporting.
sartoris-digitalAudit code changes for exploitable security vulnerabilities with multi-agent validation.
IndustrialAnalyze code for security vulnerabilities and performance issues.
pipecrew-aiAssess feature branches across repositories for wire-shape agreement and event wiring.
