aegis-vulnerability-management-process
Installation
SKILL.md
Vulnerability Management Process (VULN)
Adaptation Note — Read First
This module deviates from the red-team template on purpose: it is not vulnerability hunting; it defines the RECURRING loop that consumes what every other module produces. Section meanings are remapped as follows:
| Template section | Meaning HERE |
|---|---|
| What To Check | Readiness/maturity audit of an existing VM program: does each loop stage exist, with evidence? |
| Where To Look | Where program artifacts should live: tracking dirs, registers, calendars, cron, CI configs |
| Patterns & Signatures | The templates: priority decision tree, worked example, exception schema, metrics formulas, agendas |
| Taint Tracing Guidance | How one advisory/audit output propagates through the stages to a terminal state |
| Exploitation & Reproduction | Tabletop: one finding walked through the FULL loop end-to-end on paper |
| Remediation | Building missing stages, in dependency order |
| Severity Assessment | The priority-adjustment bands and SLA table themselves |
Empty cwe array is intentional: this module audits process capability, not a code-level weakness class. It sits downstream of both orchestrators — SKILL-CODE.md (code slugs) and SKILL-SERVER.md (host slugs) — and borrows incident-side vocabulary from IR (skills/operations/incident-response/SKILL.md). It produces findings only about the program itself.