skills.rest
Nairon-AI
Nairon-AIOFFICIAL
Explore all skills by this author →
WebsiteGitHub

flux-vuln-validate

Validate security findings from flux-security-findings.json with reachability and data flow analysis.

7|1|Updated Feb 21, 2026
Search Tags:#security#vulnerability#validation#proof-of-concept#cvss#exploitability
One-click install
npx skills add https://github.com/Nairon-AI/flux --skill flux-vuln-validate
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: flux-vuln-validate
Source: https://github.com/Nairon-AI/flux/tree/main/skills/flux-vuln-validate
Command: npx skills add https://github.com/Nairon-AI/flux --skill flux-vuln-validate

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps security teams validate findings from a flux-security-scan by assessing actual exploitability, filtering false positives, and generating safe proof-of-concept exploits.

Core Features & Use Cases

  • Exploitability assessment: determines if a vulnerability is real and how it could be exploited.
  • False positive reduction: filters out non-exploitable findings using threat-model context.
  • Proof-of-concept generation: produces safe PoCs for confirmed findings to guide remediation.
  • CVSS scoring & reporting: computes CVSS scores and outputs structured validation results.

Quick Start

Run the flux-vuln-validate workflow against the provided security findings file and threat model to start validating findings.

Frequently Asked Questions about flux-vuln-validate

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate security findings to filter out false positives?▼

To validate security findings and filter false positives, the skill traces data flow and reachability against a threat model to assess actual exploitability, categorizing impact and dropping non-exploitable findings from the final report.

How can I generate a safe proof-of-concept for a confirmed vulnerability?▼

You can generate a safe proof-of-concept by running the validation workflow on confirmed findings, which produces structured PoCs designed specifically to guide remediation without causing active harm.

How do I calculate CVSS scores for vulnerabilities during exploitability assessment?▼

Exploitability assessment calculates CVSS scores automatically by evaluating the reachability and data flow of exploitable paths, outputting the scores alongside mitigation opportunities in a structured validation report.

What is the best way to assess exploitability for security vulnerabilities in my code?▼

The best way to assess exploitability is to trace reachability and data flow paths, which determines if a vulnerability is real and how it could be exploited based on your specific threat-model context.

Do I need a specific security findings file to start validating vulnerabilities?▼

Yes, you need a flux-security-findings.json file containing the raw security findings, along with input filters and a threat model, to identify which vulnerabilities to validate.

Why does my vulnerability validation report include non-exploitable findings?▼

Vulnerability validation reports include non-exploitable findings when threat-model context is insufficient, as the skill relies on tracing reachability and data flow to accurately filter false positives.

Related Skills

Explore More Software Engineering Skills→
IEatCodeDailyIEatCodeDaily

vulnerability-validation

Validate commit-security-scan findings for exploitability and output validated-findings.json.

Community
Advanced
briiirussellbriiirussell
345

vuln-research

Assess CVE applicability, exploitability, and remediation options for specific environments.

Community
Advanced
phrazzldphrazzld
13

security-scan

Analyze whole-codebase data flows for OWASP Top 10 vulnerabilities.

Community
Advanced
adaptive-enforcement-labadaptive-enforcement-lab
3

risk-prioritization-framework-for-engineers

Prioritize vulnerability remediation using CVSS scores and decision trees.

Official
Advanced