finding-triage

What problem does it solve?

Finding-triage helps you determine whether a single security finding is real and, if so, document an auditable disposition (Fixed, Deferred, Accepted Risk, or False Positive) with a mitigation plan or justification that fits your environment.

Core Features & Use Cases

• Single-Finding Disposition Writeup: Produces a ticket-ready record using the appropriate template (Fixed, Defer, Accept Risk, or False Positive).
• Evidence-Based False-Positive Evaluation: Checks reachability, preconditions, environment mismatch, existing controls, and scanner artifacts so you can justify suppression or re-evaluation.
• Contextual Severity Adjustment: Refines scanner-provided severity using factors like exploitability, exposure, data sensitivity, and compensating controls.

Quick Start

Use the finding-triage skill to triage the security finding you paste in by generating an actionable disposition and mitigation or justification document.