Visa Vulnerability Agentic Harness (VVAH) Skill

Skill by ara.so — AI Agent Skills collection.

VVAH is Visa's open-source harness for autonomous vulnerability discovery using frontier AI models. It implements a 9-stage pipeline: attack surface mapping → threat modeling → multi-lens research → adversarial verification → exploit chaining → SARIF reporting. Designed to reduce Mean Time to Adapt (MTTA) from AI-discovered weakness to validated fix.

Installation

Prerequisites:

• Python ≥ 3.10
• Claude Code session (claude login) OR API key (Anthropic/OpenAI)

Install into virtual environment (recommended):

python3 -m venv .venv
source .venv/bin/activate  # On Windows: .\.venv\Scripts\Activate.ps1
pip install .