triage

Aggregate pentest findings into a severity-clustered triage.md with confidence scores.

18|3|Updated Apr 16, 2026
One-click install
npx skills add https://github.com/Kalp1774/akira --skill triage-kalp1774
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: triage
Source: https://github.com/Kalp1774/akira/tree/main/skills/triage
Command: npx skills add https://github.com/Kalp1774/akira --skill triage-kalp1774

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Aggregates scattered phase outputs from a pentest engagement into a single, severity-clustered findings list and prevents hallucinated or unsupported findings by validating raw corroboration before marking issues as confirmed.

Core Features & Use Cases

  • Dynamic aggregation: Discovers and reads any phase summaries present in the results directory to build a holistic view of the engagement.
  • Evidence gating & verification: Re-reads raw tool outputs for confirmed findings, applies a false-positive verification gate, and downgrades findings with insufficient confidence.
  • Prioritization & reporting: Ranks findings by confirmed vs potential status and severity, produces a top-5 actionable list, and writes a coverage-aware triage.md ready for final reporting.
  • Use case: After running recon, secrets, and exploit phases, run triage to produce a prioritized findings list with confidence scores and evidence links for the report.

Quick Start

Aggregate findings for target example.com and write the triage.md file to the results directory.

Frequently Asked Questions about triage

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I aggregate pentest findings from multiple phases into a single report?

To aggregate pentest findings, this Skill dynamically discovers and reads phase summaries from recon, secrets, and exploit phases, consolidating them into a severity-clustered triage document with confidence scores and evidence links.

How does confidence scoring work for vulnerability triage?

Confidence scoring for vulnerability triage works by re-reading raw tool outputs to verify evidence, applying a false-positive verification gate, and downgrading findings with insufficient corroboration to potential status instead of confirmed.

What is the best way to prioritize vulnerabilities after a multi-phase penetration test?

The best way to prioritize vulnerabilities is by ranking findings based on confirmed versus potential status and severity, producing a top-5 actionable list within a coverage-aware triage.md file ready for final reporting.

Can I use this triage process for engagements with only recon and secrets phases?

Yes, you can use this triage process for partial engagements because it dynamically discovers any phase summaries present in the results directory, building a holistic view from whatever phase artifacts are available.

How to prevent hallucinated or unsupported findings in a pentest report?

To prevent hallucinated findings in a pentest report, this Skill validates raw corroboration by re-reading raw tool outputs and applying an evidence gating check before marking issues as confirmed in the final triage document.

Does vulnerability triage require a specific results directory structure?

Vulnerability triage requires a results directory containing phase summaries and raw evidence files emitted by multi-phase engagement activities like recon, secrets, and exploit phases for a given target.