skills.rest
philo-groves
philo-grovesCOMMUNITY
Explore all skills by this author →
GitHub

maxtac-source-finding-intake

Normalize and triage external security findings into MaxTAC intake contracts.

12|Updated Jun 1, 2026
Search Tags:#normalization#triage#external data#security findings#MaxTAC
One-click install
npx skills add https://github.com/philo-groves/MaxTAC --skill maxtac-source-finding-intake
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: maxtac-source-finding-intake
Source: https://github.com/philo-groves/MaxTAC/tree/main/plugins/maxtac-source/skills/maxtac-source-finding-intake
Command: npx skills add https://github.com/philo-groves/MaxTAC --skill maxtac-source-finding-intake

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the normalization and triage of external security findings, streamlining the process for MaxTAC users and reducing manual effort.

Core Features & Use Cases

  • External Finding Normalization: Import, normalize, and transform external security findings into a stable intake format.
  • Static Triage: Classify each finding as confirmed, not_actionable, or needs_review using static repository evidence.
  • Use Case: Quickly review and categorize hundreds of external findings (e.g., SARIF, GitHub code scanning, CVE/GHSA advisories) against your repository.

Quick Start

Normalize and triage external security findings from a SARIF file into MaxTAC intake format using python <skill-dir>/scripts/finding_intake.py normalize --root <workspace-root> --repo <repo-path> --input findings.sarif --source-type sarif --intake-id <id>.

Frequently Asked Questions about maxtac-source-finding-intake

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I normalize external security findings into a standard intake format?▼

You can normalize external security findings into a standard intake format using Python scripts that transform SARIF, GitHub code scanning, or CVE/GHSA advisories into a stable MaxTAC intake contract.

What is the best way to triage SARIF findings against my repository?▼

Triage SARIF findings against your repository by running a Python intake script that applies static analysis to classify each finding as confirmed, not_actionable, or needs_review.

Can I use this to classify GitHub code scanning vulnerabilities automatically?▼

Yes, you can classify GitHub code scanning vulnerabilities automatically by importing the external findings and applying static repository evidence to categorize them for MaxTAC intake.

Do I need Python to automate external security finding triage for MaxTAC?▼

Yes, Python is required to automate external security finding triage because the normalization and classification logic is implemented within Python scripts.

How do I import and triage hundreds of CVE advisories quickly?▼

Import and triage hundreds of CVE advisories quickly by executing the intake normalization script with your workspace and repository paths to generate classified MaxTAC intake contracts.

Why are my external security findings marked as needs_review during triage?▼

External security findings are marked as needs_review during triage when static repository evidence is insufficient to definitively classify them as confirmed or not_actionable.

Related Skills

Explore More Software Engineering Skills→
bitan-delbitan-del
4

openclaw-ghsa-maintainer

Fetch, verify, and publish GHSA advisories for OpenClaw repositories.

Community
Advanced
philo-grovesphilo-groves
12

maxtac-core-contracts

Transform research data into machine-readable MaxTAC result contracts.

Community
Advanced
LuisSambranoLuisSambrano
7

code-review

Perform systematic code review and static analysis across multiple programming languages.

Community
Advanced
zekiriabdzekiriabd
140

sarif-parsing

Parse SARIF 2.1.0 files to extract, normalize, filter, and compare static analysis findings.

Community
Advanced