skills.rest
SocketDev
SocketDevOFFICIAL
Explore all skills by this author →
Website𝕏@SocketSecurityGitHub

fleet-triaging-findings

Triage raw security-scanner output into prioritized findings with owners.

125|42|Updated May 19, 2025
Search Tags:#workflow#verification#ownership#deduplication#triage#security-findings
One-click install
npx skills add https://github.com/SocketDev/socket-mcp --skill fleet-triaging-findings
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: fleet-triaging-findings
Source: https://github.com/SocketDev/socket-mcp/tree/main/.agents/skills/fleet-triaging-findings
Command: npx skills add https://github.com/SocketDev/socket-mcp --skill fleet-triaging-findings

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Triage raw security-scanner output into a concise, deduplicated, prioritized list with owners. It reduces noise and accelerates remediation.

Core Features & Use Cases

  • Verify each finding is real, collapse duplicates across scanners, rank survivors by derived exploitability, and route each to a component owner.
  • Output TRIAGE.json + TRIAGE.md and support interactive use or --auto mode for headless runs.

Quick Start

Provide a findings path (file or directory) and run the triaging workflow to produce TRIAGE.json and TRIAGE.md.

Frequently Asked Questions about fleet-triaging-findings

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I triage security scanner findings from multiple tools?▼

Triage security findings by ingesting raw scanner output, deduplicating overlapping results, verifying exploitability, and routing prioritized items to component owners. It processes batches from scanners like Socket CLI or Trivy into a concise, actionable list.

What is the best way to deduplicate security vulnerabilities across different scanners?▼

Deduplicate vulnerabilities by ingesting multiple scanner reports, collapsing identical findings across tools, and verifying that survivors are real threats. This reduces noise and leaves a prioritized set of unique issues for remediation.

Can I automate triaging Trivy or TruffleHog reports in a headless pipeline?▼

Automate triaging for Trivy, TruffleHog, or other scanner reports using the auto mode flag. This enables headless runs that verify, rank, and route findings to generate TRIAGE.json and TRIAGE.md outputs without interactive review.

Does the triage workflow support JSON and Markdown scanner report formats?▼

The triage workflow supports JSON and Markdown scanner report formats. It ingests these files or directories directly, processing raw output to verify findings and generate consolidated TRIAGE.json and TRIAGE.md outputs.

How do I prioritize security findings by exploitability and assign ownership?▼

Prioritize security findings by ranking verified vulnerabilities based on derived exploitability and routing each to a designated component owner. The workflow outputs both a structured JSON file and a readable Markdown report.

Related Skills

Explore More Software Engineering Skills→
SocketDevSocketDev
125

triaging-findings

Verify, deduplicate, and rank scanner findings into TRIAGE.json and TRIAGE.md.

Official
Advanced
AcosmiAcosmi
6

system-notify

Send multi-channel notifications and check environment prerequisites for automated pipelines.

Community
Intermediate
lookleelooklee

BTW - 顺带提问

Ask brief related questions within ongoing conversations using shared context.

Community
Basic
RussianLioNRussianLioN
1

security-health-inline

Orchestrate inline security vulnerability detection and remediation with automated patching and Beads integration.

Community
Advanced