Exploitability Validation Skill

Validate vulnerability findings for reachability and exploitability using staged artifacts.

Updated Mar 13, 2026
One-click install
npx skills add https://github.com/dawsonblock/OracleOS --skill exploitability-validation-skill-dawsonblock
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Exploitability Validation Skill
Source: https://github.com/dawsonblock/OracleOS/tree/main/Interface/Web/raptor-main/.claude/skills/exploitability-validation
Command: npx skills add https://github.com/dawsonblock/OracleOS --skill exploitability-validation-skill-dawsonblock

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a disciplined pipeline to verify that vulnerability findings are real, reachable, and exploitable, preventing wasted effort on false positives and misdirected exploit development.

Core Features & Use Cases

  • End-to-end validation across Stage A to Stage E artifacts (checklist.json, findings.json, attack-tree.json, hypotheses.json, attack-paths.json, attack-surface.json).
  • Deterministic, gate-driven verification that requires evidence and reproducible results before proceeding to exploit development.
  • Applicable after vulnerability scans to confirm realism and feasibility, saving time and risk.

Quick Start

Run the exploitability validation workflow on a validated finding to determine its real-world exploitability and produce a structured findings output.

Frequently Asked Questions about Exploitability Validation Skill

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate vulnerability findings to ensure they are exploitable before exploit development?

Vulnerability validation confirms that findings are real, reachable, and exploitable through a structured, multi-stage process. This gate-driven approach requires evidence and reproducible results before proceeding to exploit development, preventing wasted effort on false positives.

What is the best way to filter out false positives after a security scan?

Filtering false positives after a security scan requires a deterministic validation pipeline that checks findings for realism and feasibility. By leveraging structured artifacts like findings.json and attack-tree.json, you can gate subsequent actions and conserve resources.

How do I use attack trees and attack paths to verify vulnerability reachability?

Verifying vulnerability reachability involves analyzing attack-tree.json and attack-paths.json artifacts within a structured pipeline. This stage-based analysis ensures that potential vulnerabilities are actually accessible and exploitable in the target environment before deeper investigation.

Can I gate exploit development on evidence from attack surface analysis?

Yes, gating exploit development on attack surface analysis ensures actions only proceed with verified evidence. The pipeline uses attack-surface.json and hypotheses.json to drive deterministic outcomes, requiring reproducible results before allowing further exploitation steps.

When should I use a deterministic pipeline for vulnerability validation?

A deterministic pipeline for vulnerability validation should be used after initial scans and before exploit development. It applies a gate-flow process across Stage A to Stage E artifacts to confirm that findings are real and exploitable, saving time and reducing risk.

How do I structure hypotheses for security testing validation?

Structuring hypotheses for security testing validation involves generating hypotheses.json artifacts to test attack feasibility. This structured, multi-stage process verifies that vulnerability findings are real and exploitable by requiring evidence before proceeding to the next gate.