Skill
ai-ml-attacks
This skill should be used when the user asks about "AI security", "ML pipeline attacks", "prompt injection", "model deserialization", "unsafe model loading",…
@allsmogView SkillSecurity
Skill
/package-evidence
Bundle findings, reports, audit plan, and ledger into one evidence zip.
Install
$ npx -y skills add allsmog/vuln-scout --skill package-evidence --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
- Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.Auto-invocation is when the right skill fires by itself at the right moment, driven by a FLOW.md router and a hook, instead of you invoking it by name. It is the difference between a skill being installed and a skill actually getting used.Read the full definition →
- You can call itInvoke it directly when you want it.
- Slash command
/package-evidence
Context preview
The summary Claude sees to decide when to auto-load this skill.
Bundle findings, reports, audit plan, and ledger into one evidence zip.
SKILL.md
package-evidence.SKILL.mdname: package-evidence description: Bundle findings, reports, audit plan, and ledger into one evidence zip.
Package Evidence
Use this task skill when the user asks to package evidence, export a bundle, create a deliverable, or share findings.
Workflow
1. Confirm `.claude/findings.json` exists and validates. 2. Run `/vuln-scout:report --format sarif`. 3. Run `/vuln-scout:report --format html`. 4. Run `/vuln-scout:report --format bundle --output evidence-bundle`. 5. Confirm the bundle contains `findings.json`, `findings.sarif`, `vex.json`, `attestation.json`, `report.html`, and `README.md`.
Produces
- `evidence-bundle/`
When NOT To Trigger
Do not trigger for starting a new audit, investigating a single finding, compliance mapping, report formatting preferences, or questions about evidence theory without a deliverable request.
Ships withvuln-scout
AI-powered whitebox penetration testing plugin for Claude Code. 9 languages, 22 skills, 7 autonomous agents. STRIDE threat modeling, OWASP 2025 coverage, polyglot monorepo support.
Get the whole plugin
Stats
24
Stars
4
Forks
Maintained
Maintenance
Python
Language
MIT
License
3mo ago
Last commit
6mo ago
Created
Repo: allsmog/vuln-scout
Other skills on vuln-scout.
@allsmogView SkillSkill
business-logic
This skill should be used when the user asks about "business logic", "workflow vulnerability", "trust boundary", "state machine", "authorization bypass",…
@allsmogView SkillSkill
cache-poisoning
This skill should be used when the user asks about "cache poisoning", "web cache deception", "CDN cache", "proxy cache", "nginx cache", "varnish", "cache key…
@allsmogView SkillSkill
cloud-native
This skill should be used when the user asks about "cloud security", "AWS security", "GCP security", "Azure security", "Kubernetes security", "IMDS", "instance…
@allsmogView SkillSkill
compliance-mapping
This skill should be used when the user asks about "compliance mapping", "PCI-DSS", "HIPAA", "SOC 2", "NIST CSF", "regulatory requirements", "compliance…
@allsmogView SkillSkill
cpg-analysis
This skill should be used when the user asks about "Code Property Graph", "CPG analysis", "Joern queries", "CPGQL", "data flow verification", "taint tracking…
@allsmogView Skill