Agent skill for rigorous bug bounty report triage, validation, severity escalation, and submission-ready reporting.
-
Updated
Oct 9, 2026
{{ message }}
#
vulnerability-triage
Here are 21 public repositories matching this topic...
Agent skill for producing threat models for open-source projects
open-source security threat-model alpha-omega copilot-cli agent-skills claude-code vulnerability-triage
-
Updated
Sep 27, 2026 - Python
Cut vuln noise to near-zero by proving which CVEs are actually callable from your app’s entry points, using open CLIs, reproducible SBOMs, and CI-first workflows.
python osv sarif security-tools devsecops reachability-analysis syft sbom cyclonedx supply-chain-security ci-security vulnerability-triage
-
Updated
May 27, 2026 - Python
Decision-support tool for analyzing domain/IP infrastructure profiles and prioritizing assessment efforts.
-
Updated
Feb 24, 2026 - Python
BountyDesk | Bugs, CVEs, bounties. Reproduced securely.
-
Updated
Oct 23, 2026 - TypeScript
Attacker-Reachable Sink Triage (ART) — A Kaggle Community Benchmark evaluating whether LLMs distinguish reachable code vulnerabilities from patched twins, safe logic, and vacuous noise.
-
Updated
Sep 25, 2026 - Jupyter Notebook
Public template repository for GitHub Copilot multi-agent workflows in industrial automation testing.
-
Updated
Mar 30, 2026 - Python
Read-mostly MCP server for Dependency-Track: AI-powered vulnerability triage with alias dedup, cross-project duplicate discovery, diff + carry-over between versions, and broadcast triage.
mcp vex cve security-tools sbom cyclonedx dependency-track model-context-protocol model-context-protocol-servers vulnerability-triage
-
Updated
Apr 25, 2026 - Python
Reproducible Bandit alert-triage benchmark with a 949-row dataset, 265-row held-out split, classifiers, leakage checks, and published results.
python benchmark machine-learning reproducible-research application-security bandit sast vulnerability-triage
-
Updated
Jun 22, 2026 - Python
Free, self-hostable AI triage for FOSS security reports -- screens against a project's own documented defensive patterns
-
Updated
Sep 12, 2026 - JavaScript
-
Updated
Apr 13, 2026 - Python
Turn AI-assisted fuzzing crash artifacts into evidence-preserving duplicate clusters, reproduction states, and validation handoffs.
fuzzing android-security github-security-lab agent-skills vulnerability-triage ipollowork ipollowork-plugin ai-fuzzing
-
Updated
Oct 1, 2026 - JavaScript
A zero-dependency Python CLI that builds an approximate static call graph of a Python web app and tells you whether a given function, or each finding in a SARIF file, can be reached from an HTTP entry point.
-
Updated
Oct 18, 2026 - Python
Human-initiated security review workflow: deterministic scanning, agent-assisted triage, independent adversarial validation, and an evidence gate before any finding is confirmed.
static-analysis application-security threat-modeling appsec sarif devsecops security-review sast semgrep false-positive-reduction secure-sdlc ai-assisted-security vulnerability-triage
-
Updated
Oct 21, 2026 - Python
OpenAI-powered white-hat security triage CLI and GitHub Action starter kit for open-source maintainers.
cli security oss openai whitehat maintainer triage responsible-disclosure github-actions vulnerability-triage
-
Updated
Jun 3, 2026 - TypeScript
Public defensive AI security profile and sanitized research examples
log-analysis threat-intelligence api-security defensive-security ai-security responsible-ai api-monitoring session-monitoring security-documentation vulnerability-triage vr-security game-backend-security
-
Updated
Aug 15, 2026 - Shell
Reachability-aware CVE prioritizer: tells you which vulnerabilities are actually reachable from your code, and drafts the GitHub issue for the ones that matter.
python rust tree-sitter typescript static-analysis cybersecurity cve appsec vulnerability-management software-supply-chain osv security-automation sarif devsecops software-composition-analysis reachability-analysis dependency-security claude-api vulnerability-triage github-code-scanning
-
Updated
Jul 21, 2026 - Python
Provenance-aware Linux kernel vulnerability research harness used in the investigation of CVE-2026-53075
linux-kernel provenance security-research vulnerability-research ai-security openai-codex kernel-security llm-security vulnerability-triage syzbot
-
Updated
Aug 9, 2026 - Python
AIG Simulation
-
Updated
Sep 3, 2025
Reproduce-first triage for vulnerability and security reports: run the PoC in a rootless, network-less sandbox, check policy and duplicates, get a verdict with an evidence bundle. Python CLI and GitHub Action.
security sandbox cybersecurity bug-bounty vulnerability appsec vulnerability-management triage security-automation sarif security-tools devsecops responsible-disclosure podman github-actions psirt vulnerability-disclosure open-source-security llm vulnerability-triage
-
Updated
Oct 25, 2026 - Python
Add this topic to your repo
To associate your repository with the vulnerability-triage topic, visit your repo's landing page and select "manage topics."