skills.rest
Q16G
Q16GCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

vuln-reproduction

Normalize vulnerability findings into standardized reproduction tasks with traceable evidence chains.

83|8|Updated May 6, 2026
Search Tags:#workflow#security#vulnerability#evidence#sast#reproduction#dast
One-click install
npx skills add https://github.com/Q16G/aster --skill vuln-reproduction
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vuln-reproduction
Source: https://github.com/Q16G/aster/tree/main/skills/vuln-repro/vuln-reproduction
Command: npx skills add https://github.com/Q16G/aster --skill vuln-reproduction

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Normalizes vulnerability findings from reports into standardized reproduction tasks and a traceable evidence chain.

Core Features & Use Cases

  • Normalize findings from sast/dast reports, remediation lists, and finding inventories into standardized entries.
  • Route each item to the appropriate reproduction strategy, execute deterministic steps, and collect verifiable evidence.
  • Produce a structured reproduction report suitable for sharing and archival.

Quick Start

Provide a vulnerability report to initiate the reproduction workflow and obtain a structured plan.

Frequently Asked Questions about vuln-reproduction

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I normalize SAST and DAST vulnerability findings into a standardized reproduction task list?▼

You can standardize SAST and DAST vulnerability findings by processing them through a phase-driven workflow that maps each item to a reproduction strategy and creates a traceable evidence chain.

What is a CVE reproduction workflow with an evidence chain?▼

A CVE reproduction workflow systematically recreates reported vulnerabilities to confirm their existence, capturing verifiable evidence throughout deterministic steps to produce a structured reproduction report for sharing and archival.

How do I generate a structured reproduction report from a raw vulnerability findings inventory?▼

To generate a structured reproduction report, you provide a vulnerability findings inventory to the workflow, which then normalizes entries, executes reproduction strategies, and compiles verifiable evidence.

Can I use standard command-line tools to execute deterministic vulnerability reproduction steps?▼

Yes, the vulnerability reproduction workflow requires built-in command-line tools like bash, read_file, list_files, and rg to execute deterministic steps and collect verifiable evidence.

What is the best way to route different vulnerability findings to appropriate reproduction strategies?▼

The best way to route vulnerability findings is to normalize them into standardized entries first, allowing the phase-driven workflow to match each item to an appropriate reproduction strategy for evidence collection.

Does handling remediation lists require a specific phase-driven workflow to collect verifiable evidence?▼

Yes, handling remediation lists requires a phase-driven workflow to route each vulnerability item to a deterministic reproduction strategy, ensuring the collection of verifiable evidence for the final report.

Related Skills

Explore More Software Engineering Skills→
HouseGarofaloHouseGarofalo
3

security-scanner

Scan container images, dependencies, and IaC for security vulnerabilities.

Official
Advanced
jassicsjassics
6

finding

Document security findings with severity, evidence, impact, and remediation.

Community
Intermediate
theslashdojotheslashdojo

bash

Execute Bash commands and capture stdout/stderr with timeout and directory control.

Official
Advanced
opsMachineopsMachine
1

3-security-spec

Create a failing test reproducing the top backlog security vulnerability.

Official
Intermediate