Structure security findings with vulnerability, impact, and remediation details.
npx skills add https://github.com/JoranHonig/grimoire --skill finding-joranhonig
Please help me install this Agent Skill. Skill: finding Source: https://github.com/JoranHonig/grimoire/tree/main/skills/finding Command: npx skills add https://github.com/JoranHonig/grimoire --skill finding-joranhonig
This skill helps security researchers and teams understand and apply consistent conventions for security findings, including structure, format, and best practices, enabling faster reviews and reliable reporting.
Draft a minimal finding with the required frontmatter and sections using the /finding workflow.
High-intent search queries and answers about installing and using this skill.
A security finding should include required frontmatter and sections articulating the vulnerability, impact, and remediation. This structure ensures the issue is understood without external context and is ready for dedup or report integration.
You standardize security findings by applying consistent conventions for title construction, severity rationale, and context references across sources. This produces concise, well-formatted documents ready for reliable reporting.
Best practices for security findings involve constructing precise titles and providing clear severity rationale. Focusing on self-contained findings with reproducible steps and validated references improves report quality and consistency.
To draft a minimal security finding, use the /finding workflow to generate the required frontmatter and sections. This produces a concise, well-formatted markdown document ready for immediate review or dedup.
Yes, you can use these structured security finding conventions to train teams in standardized reporting. It teaches the required frontmatter, sections, and best practices needed for faster reviews and reliable documentation.
xijunwwAutomate identification, exploitation, and post-exploitation of known product vulnerabilities with Nuclei.
marvinbissCompare two Markdown security audit reports to track remediation progress and identify new vulnerabilities.
HakAlAnalyze codebases to identify cleanup opportunities and generate prioritized remediation reports.
zebbernGenerate submission-ready Intigriti vulnerability reports with CVSS scoring and remediation guidance.
