Validate security finding files for structure, severity, and cited sources.
npx skills add https://github.com/JoranHonig/grimoire --skill finding-review
Please help me install this Agent Skill. Skill: finding-review Source: https://github.com/JoranHonig/grimoire/tree/main/skills/finding-review Command: npx skills add https://github.com/JoranHonig/grimoire --skill finding-review
Provides a structured, standards-driven review of existing security findings to improve clarity, correctness, and actionable guidance so maintainers can assess and remediate issues confidently.
Review the specified finding file, run the validation checks, include the familiar and librarian assessments, and apply the recommended edits when prompted.
High-intent search queries and answers about installing and using this skill.
To validate security findings, you can review and parse finding files to check frontmatter, sections, severity, preconditions, and cited sources. This process generates a structured passes, warnings, and failures report to improve clarity and correctness.
The best way to harden draft security audit findings is to run structural validation and cross-check impact and references. This evaluates title clarity, description completeness, and severity accuracy to provide actionable remediation guidance confidently.
Yes, you can automatically apply fixes when reviewing security finding files. The review process presents recommendations and can apply approved edits interactively, then re-run validation checks to ensure the updated finding passes schema compliance.
Cross-checking verifies authoritative references by invoking a librarian agent to locate and validate cited sources. It also uses a familiar agent to triangulate impact and feasibility, ensuring the finding is factually accurate and well-supported.
If your security finding has schema violations or missing preconditions, run a structural validation review. This identifies frontmatter schema violations and unspecified preconditions, offering interactive fixes and recommendations to harden the file.
alexjxCreate new Claude Code skills with SKILL.md and optional dependency files.
Eric-Pacheco95Audits a repository for vulnerabilities, gitignore issues, and compliance.
UsernameTronDocument multi-agent orchestration patterns, token economics, and prompt engineering principles.
zhaohui-yangCheck Chinese official documents for structure, quality, and factual accuracy.
