What problem does it solve? A single security scan pass is a sample, not a census: one pass over a codebase misses vulnerabilities that another pass would catch. This Skill repeats independent discovery passes until they stop producing new candidates, then validates, analyzes, and reports on the merged results. ## Core Features & Use Cases - Repeated Independent Discovery: Dispatches concurrent subagent passes, each generating its own threat model and raw candidates, until two consecutive rounds yield nothing new or the pass budget (default 12) is exhausted. - Deterministic Candidate Merging: Normalizes and merges raw candidates across passes into a single ledger with stable candidate IDs, so rediscovered bugs merge instead of duplicating. - Centralized Validation and Reporting: Runs validation, attack-path analysis, vulnerability write-ups, and hardening proposals once over the merged ledger, producing a sealed scan contract with report.md, findings.json, coverage.json, and SARIF-style artifacts. - Use Case: Before a major release, run an exhaustive deep scan of the entire repository with a 12-pass budget to surface vulnerabilities that a standard single-pass scan would miss, then receive a finalized report with per-finding write-ups. ## Quick Start Run a deep security scan over this repository with the default pass budget and generate the final report.
