vulnerability-triage-brocards

Name: vulnerability-triage-brocards
Author: trailofbits

trailofbits ★ 7875

This skill applies a principled framework of 7 brocards (logical maxims) to triage vulnerability reports, CVEs, and bug bounty submissions, producing ACCEPT, DISMISS, or NEEDS-MORE-INFO verdicts before deeper analysis. It evaluates reports against structured criteria including threat model articulation, exploit feasibility, code reachability, spec compliance, documented behavior, remediation cost, and technical evidence sufficiency.

Security Project Management No API key detected prompt pack

Install

> /plugin marketplace add trailofbits/skills/tree/HEAD/plugins/vulnerability-triage-brocards

> /plugin install vulnerability-triage-brocards

Source: https://github.com/trailofbits/skills/tree/HEAD/plugins/vulnerability-triage-brocards

What it's made of

1 skill

Commands: 0
Agents: 0
Skills: 1
MCP servers: 0
Hooks: 0

What it needs & plugs into

API keys: none
Paid services: none detected
External tools: none
Talks to: nothing external detected

Analyzed 2026-10-29. Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.

Is this your plugin?

Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (trailofbits).