What problem does it solve?
Turning raw vulnerability notes, PoCs, or scanner findings into accurate, reproducible disclosure reports is slow and error-prone, and unverified claims about affected versions or impact can undermine a report's credibility.
Core Features & Use Cases
- Sceptical source validation: Inspects the exact vulnerable source revision, traces the introducing change, and verifies affected and fixed release versions before drafting.
- Structured report format: Produces self-contained Markdown reports with Executive Summary, Background, Vulnerability Details, Exploitability Analysis, Proof of Concept, Remediation, and Summary sections.
- Campaign workflow: Deduplicates multiple findings by root cause and assigns one drafting sub-agent per vulnerability for disclosure campaigns.
- Use Case: Given a Codex Security scan finding and the target repository, produce a polished disclosure report with verified affected versions, a real PoC, and a plain-English remediation plan.
Quick Start
Use the vulnerability-writeup skill to turn these vulnerability notes and the checked-out source tree into a self-contained disclosure report.
