| name | vulnerability-triage |
| description | Prioritize and explain security vulnerabilities found by Kai scans with research context |
| version | 1.0.0 |
| author | kai-agent |
| metadata | {"kai":{"tags":["kai","security","triage","vulnerabilities","research"]}} |
Vulnerability Triage
Analyze, prioritize, and contextualize security vulnerabilities discovered by Kai.
When to use
After a security scan completes with findings. This skill goes beyond just listing vulnerabilities, it explains WHY each matters and what the real-world impact could be.
Workflow
1. Gather findings
list_vulnerabilities(executionId) → get all findings
For each finding:
get_vulnerability_details(executionId, exploitId)
2. Categorize by severity and type
Group findings into:
- Critical: Remote code execution, authentication bypass, SQL injection with data access
- High: Privilege escalation, SSRF, stored XSS, insecure deserialization
- Medium: Reflected XSS, CSRF, information disclosure, path traversal
- : Missing headers, verbose errors, minor misconfigurations