security-review

Triage vulnerability reports by parsing reporter details, affected assets, vulnerability type, and evidence to assign initial severity. The skill processes submissions from bug bounty platforms and internal discoveries to standardize risk assessment and remediation prioritization across teams.

Map vulnerability findings to Bugcrowd VRT categories by classifying incoming reports during the triage process. The skill automatically enforces VRT mapping to ensure consistent severity rating and standardized classification across web apps and infrastructure reports.

Generate Linear tickets for vulnerability remediation by processing triaged reports into structured task descriptions. The skill creates tickets with remediation plans after parsing and classifying findings, ensuring structured and auditable outputs for development teams.

Draft responsible disclosure emails by using the triage skill to generate professional respondent messages after assessing vulnerability severity. The skill produces structured communication that maintains auditable decision trails for incident response and bug bounty correspondence.

Vulnerability triage works for both web apps and infrastructure by parsing reports across diverse asset types. The skill handles findings from researchers, bug bounty platforms, and internal discoveries, assigning severity and remediation steps regardless of the affected system.

Structured incident response reduces time to reply and standardizes vulnerability handling across teams. Without it, validating incoming reports to determine risk, scope, and remediation priorities becomes inconsistent, leading to delayed responses and untracked security decisions.