Filter false positives and assign confidence scores to vulnerability findings.
npx skills add https://github.com/ersinkoc/security-check --skill sc-verifier
Please help me install this Agent Skill. Skill: sc-verifier Source: https://github.com/ersinkoc/security-check/tree/main/skills/sc-verifier Command: npx skills add https://github.com/ersinkoc/security-check --skill sc-verifier
This skill reduces noise in vulnerability reports by automatically filtering false positives and assigning a structured confidence score, enabling security teams to focus on actionable issues.
Run the verifier in your security pipeline to generate verified findings from the latest Phase 2 results.
High-intent search queries and answers about installing and using this skill.
Eliminate false positives in vulnerability findings by applying automated deduplication, reachability analysis, and sanitization checks to filter noise and produce a concise verified findings list.
Confidence scoring for vulnerability findings works by applying reachability, sanitization, framework protections, and contextual checks to compute a final risk level and severity recalculation for each issue.
Deduplicate and verify security findings by running a verifier in Phase 3 of your scanning pipeline to aggregate Phase 2 results, apply context analysis, and output a final verified findings document.
Framework and configuration protections can filter security report noise by checking existing mitigations within the target environment to automatically reduce false positives during the verification process.
Prioritize remediation after a security scan by processing aggregated findings through reachability analysis and confidence scoring to generate a verified findings list with recalculated severity levels.
Phase 2 findings are required to run vulnerability verification, as the verifier aggregates these intermediate security scan results, applies context analysis, and produces the final verified findings document.
roderikParse SARIF 2.1.0 files to extract, deduplicate, and summarize findings.
matteocervelliAssess software vulnerabilities with CVSS scoring and remediation planning.
bugrabilgeDetect security vulnerabilities in code, running apps, and dependencies.
ElbertePlinioValidate code scan findings and generate structured JSON with exploitability details.
