skills.rest
chrismcmacken
chrismcmackenCOMMUNITY
Explore all skills by this author →
GitHub

research-finding

Analyze security findings to determine exploitability and document remediation guidance.

Updated Dec 25, 2025
Search Tags:#research#vulnerability#data-flow#exploitability#attack-chain#security-findings
One-click install
npx skills add https://github.com/chrismcmacken/bounty-hunter --skill research-finding
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: research-finding
Source: https://github.com/chrismcmacken/bounty-hunter/tree/main/.claude/skills/research-finding
Command: npx skills add https://github.com/chrismcmacken/bounty-hunter --skill research-finding

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill converts security findings from scanners like Semgrep or TruffleHog, or manual reviews, into thorough exploitability analyses that inform remediation and disclosure decisions.

Core Features & Use Cases

  • Contextual analysis: maps data flows from source to sink to understand how a finding could be exploited.
  • Attack-chain construction: builds realistic scenarios with step-by-step actions and potential payloads.
  • Impact & remediation guidance: assesses business impact and provides actionable remediation steps.

Quick Start

Describe a finding by providing either a file reference (org/repo file:line) or a concise summary. The skill will return a complete exploitability assessment, including context, data-flow mapping, attack-chain scenarios, risk verdict, and remediation guidance.

Frequently Asked Questions about research-finding

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I determine the exploitability of a security finding from a scanner?▼

Assessing exploitability requires mapping complete data flows from source to sink, identifying bypass opportunities, and constructing realistic attack chains to evaluate true business impact. This yields a documented exploitability verdict with actionable remediation guidance.

What is the best way to trace data flows for vulnerability analysis?▼

Tracing data flows for vulnerability analysis involves mapping complete paths from sources to sinks to identify bypass opportunities. This process reveals how a finding could be exploited and informs the construction of realistic attack scenarios.

Can I use scanner findings from Semgrep or TruffleHog to build attack chains?▼

Yes, scanner findings from tools like Semgrep or TruffleHog, or manual reviews, can be used to build attack chains. The findings are analyzed to construct realistic scenarios with step-by-step actions and potential payloads.

How do I assess the business impact of a security vulnerability?▼

Assessing the business impact of a security vulnerability involves analyzing code, data, and infrastructure interactions to understand true risk. The assessment concludes with a risk verdict and actionable remediation steps.

What format should I provide a finding in for an exploitability assessment?▼

For an exploitability assessment, provide a finding by referencing the specific file location (org/repo file:line) or by giving a concise summary. The analysis returns context, data-flow mapping, attack scenarios, and remediation guidance.

Related Skills

Explore More Education & Research Skills→
qte77qte77
2

scanning-dependencies

Scan project dependencies for vulnerabilities, license issues, and supply chain risks.

Community
Intermediate
mbwsimsmbwsims
71

security-review

Trace untrusted data flows to identify exploitable security weaknesses in code.

Community
Advanced
cyperx84cyperx84
2

Vulnerability Detection

Scan source code, dependencies, and infrastructure for security vulnerabilities.

Community
Advanced
fnsalinasfnsalinas
1

vulnerability-scanner

Automate vulnerability analysis and prioritization for software projects.

Community
Advanced