This skill should be used when the user asks to "triage a vulnerability report", "assess a CVE", "evaluate a bug bounty submission", "decide if a finding is valid", "review a security finding", "dismiss a vulnerability", "should we fix this CVE", "prioritize a vulnerability report", or needs to determine whether an incoming vulnerability report warrants investigation.
Install
npx skills add trailofbits/skills --skill vulnerability-triage-brocardsnpx skills add trailofbits/skills --skill vulnerability-triage-brocards -a claude-code -gnpx skills add trailofbits/skills --skill vulnerability-triage-brocards -a codex -ggemini skills install https://github.com/trailofbits/skills.git --path plugins/vulnerability-triage-brocards/skills/vulnerability-triage-brocardsgh skill install trailofbits/skills vulnerability-triage-brocardsgit clone --depth 1 https://github.com/trailofbits/skills /tmp/trailofbits__skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/trailofbits__skills/plugins/vulnerability-triage-brocards/skills/vulnerability-triage-brocards ~/.claude/skills/vulnerability-triage-brocards # Claude Code
cp -R /tmp/trailofbits__skills/plugins/vulnerability-triage-brocards/skills/vulnerability-triage-brocards ~/.agents/skills/vulnerability-triage-brocards # Codex, Cursor, Gemini CLI, Copilot, OpenCode