skills.rest
Mikacr1138
Mikacr1138COMMUNITY
Explore all skills by this author →
GitHub

triage-validation

Validate bug bounty findings through a 7-question gate and 4 pre-submission checks.

2|1|Updated Mar 20, 2026
Search Tags:#validation#risk-assessment#triage#reproducibility#gatekeeping#bug-bounty#vulnerability-report
One-click install
npx skills add https://github.com/Mikacr1138/claude-bug-bounty --skill triage-validation-mikacr1138
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: triage-validation
Source: https://github.com/Mikacr1138/claude-bug-bounty/tree/main/skills/triage-validation
Command: npx skills add https://github.com/Mikacr1138/claude-bug-bounty --skill triage-validation-mikacr1138

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security teams and bug bounty participants quickly determine if a vulnerability report is valid for submission by enforcing a strict 7-question gate and supporting 4 pre-submission gates.

Core Features & Use Cases

  • 7-Question Gate: Enforces an ordered sequence; any wrong answer stops processing.
  • 4 Pre-Submission Gates: Reality check, impact validation, deduplication check, and report quality.
  • Known Bad Patterns: Never-submit list to filter out invalid or duplicate issues.
  • Chain & CVSS References: Guidance on chain-based validation, CVSS alignment, and remediation framing for credible reports.
  • Structured Reporting: Provides a repeatable framework to justify severity and remediation.

Quick Start

Apply the 7-question gate and four pre-submission gates to evaluate a vulnerability before submission.

Frequently Asked Questions about triage-validation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate a vulnerability report before submitting it to a bug bounty program?▼

Bug triage validation applies a 7-question gate and 4 pre-submission gates—Reality Check, Impact Validation, Deduplication, and Report Quality—to prevent invalid vulnerability submissions before processing.

What is the best way to check a bug bounty finding against known invalid patterns?▼

Evaluating bug bounty findings against a never-submit list filters out known bad patterns and duplicates, ensuring reports meet strict deduplication criteria before submission.

How do I structure a vulnerability report for reproducibility and credible disclosure?▼

Structuring vulnerability reports for reproducibility requires applying CVSS guidance and remediation framing to justify severity and guide findings from discovery to publishable submission.

Does this triage process provide CVSS alignment and remediation guidance for risk assessment?▼

Yes, the triage process provides CVSS alignment and remediation framing guidance to justify severity levels and structure credible vulnerability reports.

When should I stop processing a vulnerability report during triage?▼

Stop processing a vulnerability report during triage when any answer in the ordered 7-question gate fails, preventing low-quality or non-reproducible bug bounty submissions.

Related Skills

Explore More Education & Research Skills→
sseshachalasseshachala

triage-validation

Validate security findings through a seven-question gate before submission.

Community
Advanced
swannysecswannysec
2

security-vuln-analyzer

Orchestrates parallel security agents to validate vulnerabilities and generate remediation plans.

Community
Advanced
matteocervellimatteocervelli
25

vulnerability-assessor

Assess software vulnerabilities with CVSS scoring and remediation planning.

Community
Advanced
dreadnodedreadnode
11

vuln-critic

Filter low-quality and false positive vulnerability findings from scanners and agent output.

Official
Intermediate