vulnerability-validation-skill

Discover new vulnerabilities (0-days) in a target repository by analyzing the code itself, optionally starting with the bundled deterministic discovery engine, then validate candidates with attack-surface and variant analysis, empirical PoCs, reachability and threat-model gating, minimal idiomatic fixes, replayable evidence, mutation or negative controls, and role-lens consensus review. A supplied scanner finding, researcher report, or PoC is an optional seed fused into discovery, never a substitute for the mandatory native sweep; validate it alongside self-found candidates. Use it when triaging a scanner or researcher finding, correlating a CVE to a codebase, auditing a repository for 0-days, validating a PoC, or preparing a maintainer advisory.

Discover new vulnerabilities (0-days) in a target repository by analyzing the code itself, optionally starting with the bundled deterministic discovery engine, then validate candidates with attack-surface and variant analysis, empirical PoCs, reachability and threat-model gating, minimal idiomatic fixes, replayable evidence, mutation or negative controls, and role-lens consensus review. A supplied scanner finding, researcher report, or PoC is an optional seed fused into discovery, never a substitute for the mandatory native sweep; validate it alongside self-found candidates. Use it when triaging a scanner or researcher finding, correlating a CVE to a codebase, auditing a repository for 0-days, validating a PoC, or preparing a maintainer advisory.

Discover new vulnerabilities (0-days) in a target repository by analyzing the code itself, optionally starting with the bundled deterministic discovery engine, then validate candidates with attack-surface and variant analysis, empirical PoCs, reachability and threat-model gating, minimal idiomatic fixes, replayable evidence, mutation or negative controls, and role-lens consensus review. A supplied scanner finding, researcher report, or PoC is an optional seed fused into discovery, never a substitute for the mandatory native sweep; validate it alongside self-found candidates. Use it when triaging a scanner or researcher finding, correlating a CVE to a codebase, auditing a repository for 0-days, validating a PoC, or preparing a maintainer advisory.

Discover new vulnerabilities (0-days) in a target repository by analyzing the code itself, optionally starting with the bundled deterministic discovery engine, then validate candidates with attack-surface and variant analysis, empirical PoCs, reachability and threat-model gating, minimal idiomatic fixes, replayable evidence, mutation or negative controls, and role-lens consensus review. A supplied scanner finding, researcher report, or PoC is an optional seed fused into discovery, never a substitute for the mandatory native sweep; validate it alongside self-found candidates. Use it when triaging a scanner or researcher finding, correlating a CVE to a codebase, auditing a repository for 0-days, validating a PoC, or preparing a maintainer advisory.