audit-skill

Submission-readiness vulnerability audit workflow for agent-generated or researcher-supplied findings. Use when Codex needs to review an existing vulnerability candidate, report, PoC, CodeQL result, or CVE draft before disclosure; detect false positives, duplicated or intended behavior, weak evidence, unreachable paths, attacker-model mistakes, inflated CVSS/severity, overstated impact, maintainer rejection risk, and produce a maintainer-ready final report. This skill does not guide vulnerability hunting.