triage-validation - Validate security findings before reporting
Validates security findings with a seven-question gate, pre-submission checks, impact evidence, scope review, deduplication, and severity guidance.
Tags
Updated: 2026-10-05Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Validate exploitability step by step
- Check program impact scope
- Confirm in-scope assets
- Review privilege requirements
- Check known or accepted behavior
- Verify impact evidence
- Classify invalid bug patterns
- Apply pre-submission gates
- Map findings to CVSS 3.1
- Prepare report titles and evidence
Inputs
- Security finding details
- HTTP requests and responses
- Program scope page
- Accepted impact list
- Public vulnerability reports
- Target repository issues
- Changelog or design documentation
- Proof-of-impact evidence
Outputs
- Validated or rejected finding status
- Severity assessment
- CVSS 3.1 vector guidance
- Report title
- Pre-submission checklist status
- Required evidence gaps
Requirements
- Access to program scope information
- Ability to send HTTP requests
- Access to public reports and documentation
- CVSS 3.1 support