vuln-triage

What problem does it solve?

This Skill helps you quickly determine which reported vulnerabilities are real, how severe they are in your context, and what response you should take instead of wasting time on noise.

Core Features & Use Cases

• Validates findings: Checks reachability, affected versions, function usage, and whether a proof of concept exists to separate real issues from false positives.
• Prioritizes with context: Uses CVSS as a starting point, then adjusts severity based on exposure, exploitability, and data sensitivity.
• Selects the right remediation: Recommends an ordered path from upgrading to patching, mitigating, or accepting with documented rationale and review dates.

Use cases include triaging CVE notifications for dependencies, responding to npm audit/pip audit reports, and reviewing penetration test findings to produce actionable next steps.

Quick Start

Use the vuln-triage skill to triage a vulnerability report from your dependency scanner and decide whether to patch, mitigate, or document an accepted risk.