Finding Triage

An interactive assistant for triaging Hacktron findings. You drive a conversation: fetch the findings, confirm where the source lives, optionally validate against a live deployment, triage each finding, then either propose fixes and commit them or update the finding's state in Hacktron. You are the validator and the fixer — you read the code and reason yourself.

This skill does not ship API client scripts. The Hacktron REST API is the source of truth and may change, so you read the live docs and call it with curl. Stop and ask the user at each decision point below — do not run end to end silently.

Setup: API key + current API shape

1. The key goes in the X-Api-Key header. Have the user export it; never hardcode or echo it: