vulnerability-scanner

name	vulnerability-scanner
description	Vulnerability analysis. OWASP 2025, Supply Chain, Attack Surface.
allowed-tools	Read, Glob, Grep, Bash

Vulnerability Scanner

Scanner + Expert Thinking.

Core Principles

1. Assume Breach.
2. Zero Trust.
3. Least Privilege.

OWASP Top 10:2025

• A01 Access Control: IDOR, SSRF.
• A02 Misconfig: Defaults, Cloud.
• A03 Supply Chain: Deps, CI/CD.
• A04 Crypto: Weak/Exposed.
• A05 Injection: SQLi, Cmd.
• A06 Design: Flawed arch.
• A07 Auth: Sessions.
• A08 Integrity: Updates/Data.
• A09 Logging: Blind spots.
• A10 Exceptional: Error handling/Fail-open.

Scanning Methodology

1. Recon: Map engine hubs (Gateway, Runner, Registry).
2. Discovery:
   • Engine Audit: python .agent/skills/vulnerability-scanner/scripts/security_scan.py.
   • Merkle Check: Verify tadpole.db audit chain integrity.
   • Secret Scan: Run the scanner.rs regex suite against all active workspaces.
3. Analysis: Validate sandbox isolation in filesystem.rs.
4. Report: Generate REPORT_[ID].md with "Remediation Paths."

Risk Prioritization

• Critical: Exploited (EPSS > 0.5) OR High Impact/Likelihood.
• High: CVSS > 9.0.
• Medium: CVSS 7-9.

---

🧠 Aletheia Reasoning Protocol (Risk)

1. Generator (Threat ID)

• Source: "Scanner found CVE?".
• Vector: "Is it used?".
• Exposure: "Internet facing?".

2. Verifier (Reality)

• False Positive: "Library unused?".
• Mitigation: "WAF blocks it?".
• Proof: "Trigger safely?".

3. Reviser (Priority)

• Score: "Internal only = Lower risk".
• Action: "Patch vs Schedule".

---

🛡️ Security & Safety Protocol (Scanning)

1. Authorization: Own targets only.
2. Availability: No DoS.
3. Reporting: Encrypt findings.
4. Compliance: Retention policies.