vulnerability-validation

Validate security findings for exploitability and reachability using Bug Hunter artifacts.

479|56|Updated Mar 7, 2026

Search Tags:#security #vulnerability #validation #cvss #exploitability #reachability

Ready to run

npx skills add https://github.com/codexstar69/bug-hunter --skill vulnerability-validation-codexstar69

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: vulnerability-validation
Source: https://github.com/codexstar69/bug-hunter/tree/main/skills/vulnerability-validation
Command: npx skills add https://github.com/codexstar69/bug-hunter --skill vulnerability-validation-codexstar69

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill validates security findings to confirm exploitability, reachability, and real-world impact, ensuring that only genuine vulnerabilities are prioritized for fixing.

Core Features & Use Cases

Reachability Analysis: Determines if a vulnerable code path can be accessed by an attacker (EXTERNAL, AUTHENTICATED, INTERNAL, UNREACHABLE).
Exploitability Assessment: Rates the ease with which a vulnerability can be exploited (EASY, MEDIUM, HARD, NOT_EXPLOITABLE).
Mitigation Check: Identifies existing safeguards in code, frameworks, or deployment.
CVSS Scoring: Generates CVSS vectors and scores for high-severity bugs.
Use Case: After a security scan flags a potential SQL injection, this skill analyzes the finding to confirm if it's truly exploitable by an external attacker and provides a CVSS score.

Quick Start

Use the vulnerability-validation skill to analyze the findings in .bug-hunter/findings.json.

Frequently Asked Questions about vulnerability-validation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I validate security findings to check if a vulnerability is actually exploitable?▼

Vulnerability validation determines if a security finding is truly exploitable by analyzing external, authenticated, and internal paths. It assesses exploitation difficulty and checks for existing mitigations to ensure only genuine vulnerabilities are prioritized for fixing.

What is reachability analysis in security vulnerability validation?▼

Reachability analysis in vulnerability validation determines if an attacker can actually access a vulnerable code path. It categorizes access levels as EXTERNAL, AUTHENTICATED, INTERNAL, or UNREACHABLE to confirm the real-world impact of security findings.

How do I generate a CVSS vector for a critical security vulnerability?▼

To generate a CVSS vector for a critical security vulnerability, validate its exploitability and reachability using security artifacts. This process outputs CVSS vectors and scores alongside proof-of-concept details for high-severity bugs.

Can I use Bug Hunter findings to check for existing security mitigations?▼

Yes, you can validate Bug Hunter findings to check for existing mitigations. The process identifies safeguards already present in the code, frameworks, or deployment environment to determine if a vulnerability is still exploitable.

When do I need to validate security vulnerabilities for exploitation difficulty?▼

You need to validate security vulnerabilities for exploitation difficulty when prioritizing fixes after a security scan flags potential issues. This process rates findings as EASY, MEDIUM, HARD, or NOT_EXPLOITABLE to filter out non-genuine threats.