Generate structured security finding reports with YAML frontmatter for CodeCome.
npx skills add https://github.com/pruiz/CodeCome --skill finding-format
Please help me install this Agent Skill. Skill: finding-format Source: https://github.com/pruiz/CodeCome/tree/main/.opencode/skills/finding-format Command: npx skills add https://github.com/pruiz/CodeCome --skill finding-format
This Skill provides a consistent framework for creating, reviewing, and managing vulnerability findings in CodeCome, ensuring clarity and traceability.
Use the finding-format skill to generate a new finding report with all required fields in YAML frontmatter, then fill in detailed vulnerability information in the sections.
High-intent search queries and answers about installing and using this skill.
To document a security finding, generate a report with mandatory YAML frontmatter fields for classification and status, then fill the body sections with detailed vulnerability information and evidence.
The standard format for documenting CodeCome findings uses a structured template with YAML frontmatter to enforce naming conventions, consistent classification, and accurate status progression from pending to confirmed.
Track vulnerability assessment status by utilizing mandatory metadata fields within the reporting template, which support consistent status progression and maintain traceability throughout the review process.
Yes, using a standard template for security findings ensures traceability by providing a consistent framework with exact metadata fields for classification, evidence management, and review processing.
Required metadata for a vulnerability report includes mandatory YAML frontmatter fields for classification, status tracking, and evidence management, ensuring clarity and accurate progression during review.
dapperdiversGenerate structured markdown penetration test reports from JSON security scan findings.
jaypatrickReview Python, JavaScript/TypeScript, and Go codebases for security best practices.
arbazkhan971Integrate security scanning into CI/CD pipelines with blocking gates.
snake-dev-teamConvert repository data to XML, Markdown, plain text, or JSON formats.
