triage-validation

Validate security findings through a strict 7-question gate before submission.

Updated Jun 23, 2024
One-click install
npx skills add https://github.com/n4igme/randscript --skill triage-validation-n4igme
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: triage-validation
Source: https://github.com/n4igme/randscript/tree/main/llm/skills/claude-hunter/skills/triage-validation
Command: npx skills add https://github.com/n4igme/randscript --skill triage-validation-n4igme

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Helps security teams ensure findings are thoroughly validated before reporting, reducing false positives and triage friction.

Core Features & Use Cases

  • 7-question gate sequence that must pass to consider a finding valid.
  • Gate 0 Reality Check, Gate 1 Impact Validation, Gate 2 Deduplication, Gate 3 Report Quality to ensure consistency across findings.
  • Works across engagement types and supports documenting evidence to support triage decisions.

Quick Start

Run the 7-Question Gate on each new finding before submitting a report.

Frequently Asked Questions about triage-validation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate security findings before reporting to reduce false positives?

Validate security findings by running them through a strict 7-question gate sequence before submission. This process checks for reproducibility, scope conformance, and impact justification to ensure only high-confidence findings are reported.

What is a triage validation gate in bug bounty reporting?

A triage validation gate is a pre-submission checkpoint that enforces deduplication checks and evidence quality standards. It requires passing a 7-question sequence covering reality checks, impact validation, and report quality to minimize triage friction.

How do I check for duplicate security findings during bug bounty triage?

Check for duplicate security findings using the Gate 2 Deduplication step within the validation gate sequence. This ensures ongoing engagement findings are cross-referenced before submission, reducing triage friction and preventing duplicate reports.

Can I use a pre-submission validation gate across different asset types in security engagements?

Yes, you can apply the validation gate across different asset types in ongoing security engagements. The 7-question gate sequence is designed to ensure scope conformance and evidence quality regardless of the specific asset being tested.

What steps are required to enforce evidence quality standards in security reporting?

Enforce evidence quality standards by applying Gate 3 Report Quality from the 7-question validation sequence. This step documents evidence to support triage decisions and ensures consistency across all findings before submission.

Why does my bug bounty report get rejected during triage?

Bug bounty reports often get rejected during triage due to false positives, lack of reproducibility, or missing impact justification. Applying a strict 7-question validation gate before submission enforces scope conformance and evidence quality to prevent this.