Vulnerability Management Skill

🔴 AI FIRST Quality Principle

Apply the AI FIRST principle: never accept first-pass quality. Minimum 2 iterations. Read all output, improve every section. No shortcuts.

Purpose

Defines vulnerability management processes for identifying, assessing, prioritizing, and remediating security vulnerabilities.

Vulnerability Sources

• Dependabot — Dependency vulnerability alerts
• CodeQL — Static analysis security findings
• Secret Scanning — Exposed credentials detection
• npm audit — Node.js dependency vulnerabilities
• Manual Review — Code review and penetration testing