courtroom-verdict

Adjudicates confirmed Android security findings through adversarial prosecution, defense, and judge subagents.

48|27|Updated Jul 30, 2026
One-click install
npx skills add https://github.com/abisheikM1/Tribunal --skill courtroom-verdict-abisheikm1
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: courtroom-verdict
Source: https://github.com/abisheikM1/Tribunal/tree/main/skills/courtroom-verdict
Command: npx skills add https://github.com/abisheikM1/Tribunal --skill courtroom-verdict-abisheikm1

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Reproducing a bug and proving it is a genuinely reportable vulnerability are different questions; this Skill puts every confirmed finding through an adversarial trial so only findings that survive cross-examination reach the final report. ## Core Features & Use Cases - Adversarial Trial Workflow: A prosecution subagent argues each finding is real and exploitable, a defense subagent argues the strongest case against it, and a judge subagent independently re-checks the evidence and rules guilty or not-guilty. - Idempotent Verdict Recording: Verdicts are written back into report.json and api_findings.json plus an append-only courtroom_verdicts.json transcript, so re-runs never re-try decided cases. - Standardized Report Generation: Guilty findings receive a fixed-format write-up at report/<package>/<finding-id>-<slug>.md with reproduction steps, impact, remediation, and MASVS/MASTG references. - Use Case: After dynamic verification and API testing confirm a dozen candidate findings in an authorized Android pentest, run the trial to filter out findings with unrealistic preconditions and produce defensible final reports for the survivors. ## Quick Start Run the courtroom verdict on the confirmed findings for target hash <sha256> and write up the guilty verdicts as final reports.

Frequently Asked Questions about courtroom-verdict

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate which confirmed pentest findings are actually reportable?

Run the courtroom-verdict workflow, which puts each status confirmed finding through prosecution, defense, and judge subagents that independently examine the evidence. Only findings ruled guilty are promoted to written reports.

How does the adversarial trial for security findings work?

A prosecution agent argues the finding is real and exploitable from the evidence, a defense agent argues the strongest case against it, and a judge independently re-checks the evidence and rules guilty or not-guilty with written reasoning.

Does the courtroom verdict stage require a device or network access?

No. It is pure reasoning over evidence already on disk, including the evidence directory, jadx and apktool output, and threat_model.json. No external tools, emulator, or network are needed.

What happens if I re-run the verdict workflow on the same target?

Re-runs are safe and idempotent. Findings that already carry a courtroom_verdict field are skipped automatically, and the append-only courtroom_verdicts.json transcript is never re-litigated.

What are the limitations of the not-guilty verdict outcome?

A not-guilty verdict excludes the finding from the report but preserves the judge's reasoning in the transcript. If the app changes, a fresh inventory run against the new build starts a new target hash and a new trial.