research-finding - Expert Security Analyst for Finding Exploitability Research
Performs deep research on security findings to trace data flows, identify bypasses, and determine real-world exploitability with attack chain construction.
Tags
Updated: 2026-06-30security analysisvulnerability researchexploitability assessmentdata flow analysisattack chaincode review
Capabilities
Typical Inputs
What this skill does
- read code around finding location
- trace data flow from source to sink
- map function call graphs
- identify security control bypasses
- construct attack payloads
- assess finding exploitability
- generate security analysis reports
- check git history for vulnerabilities
Inputs
- source code repository
- finding file path and line number
- rule ID or vulnerability description
- scanner output from semgrep or trufflehog
Outputs
- security analysis report in Markdown
- exploitability verdict with confidence and severity
- proof of concept payloads
- remediation recommendations
Requirements
- access to source code repository
- grep or LSP tools for code search
- git access for history analysis
- code reading capability of 200+ lines around finding
