skill.json

{
  "name": "vulnerability-validation",
  "description": "Discover new vulnerabilities (0-days) in a target repository by analyzing the code itself, optionally starting with the bundled deterministic discovery engine, then validate candidates with attack-surface and variant analysis, empirical PoCs, reachability and threat-model gating, minimal idiomatic fixes, replayable evidence, mutation or negative controls, and role-lens consensus review. A supplied scanner finding, researcher report, or PoC is an optional seed fused into discovery, never a substitute for the mandatory native sweep; validate it alongside self-found candidates. Use it when triaging a scanner or researcher finding, correlating a CVE to a codebase, auditing a repository for 0-days, validating a PoC, or preparing a maintainer advisory.",
  "license": "Apache-2.0",
  "version": "0.30.0",
  "compatibility": "Portable Agent Skills format for Codex, Claude Code, Gemini CLI, GitHub Copilot, and Google Antigravity context workflows."
}