exploitability-validation

Validate vulnerability findings through a deterministic six-stage pipeline.

Updated Apr 28, 2026
One-click install
npx skills add https://github.com/roberttmadsen13-del/TOURney --skill exploitability-validation
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: exploitability-validation
Source: https://github.com/roberttmadsen13-del/TOURney/tree/main/SKILLS/raptor-main/.claude/skills/exploitability-validation
Command: npx skills add https://github.com/roberttmadsen13-del/TOURney --skill exploitability-validation

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the challenge of wasted effort on hallucinated vulnerability findings by providing a rigorous, multi-stage validation pipeline that confirms real, reachable, and exploitable issues before PoC development.

Core Features & Use Cases

  • End-to-end six-stage workflow (A-F) that systematically verifies findings from initial inventory to final CVSS scoring and reporting.
  • Enforces deterministic execution, schema validation, and evidence-based rulings to prevent false positives.
  • Use Case: After a scanner reports potential vulnerabilities, run this Skill to prune false positives and produce a validated set for exploit development.

Quick Start

Run the pipeline in your environment, then follow the prompts to complete the six-stage validation.

Frequently Asked Questions about exploitability-validation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate scanner vulnerability findings to eliminate false positives?

You can validate vulnerabilities using a deterministic six-stage pipeline that confirms findings are real, reachable, and exploitable. It applies schema validation and evidence-based rulings after initial scans to prune false positives before PoC development.

What is the best way to confirm exploitability before developing a proof of concept?

Confirm exploitability by applying a structured validation pipeline that uses attack trees, hypotheses, and attack-paths. This builds a knowledge graph of exploitability and enforces gating to produce a validated risk assessment before PoC development.

How does a multi-stage validation pipeline handle CVSS scoring and remediation?

The validation pipeline handles CVSS scoring by enforcing consistency and evidence-based rulings across its six deterministic stages. It generates a final validated risk assessment and produces actionable remediation guidance for confirmed vulnerabilities.

Can I use structured validation to build an attack tree knowledge graph from scan results?

Yes, structured validation builds an attack tree knowledge graph from scan results by applying attack trees, hypotheses, and attack-paths. The pipeline systematically verifies findings from initial inventory to final reporting.

When should I run exploitability validation in my security pipeline?

Run exploitability validation in your security pipeline immediately after initial scans report potential vulnerabilities. Running it at this stage ensures findings are real and actionable before committing resources to PoC development.

Why does vulnerability validation require deterministic execution and gating?

Vulnerability validation requires deterministic execution and gating to prevent wasted effort on hallucinated findings. Enforcing schema validation and evidence-based rulings ensures only confirmed, reachable, and exploitable issues progress through the pipeline.