Exploit Chain Analysis

Use this skill after engagement-scope has established the authorized target, scope evidence, allowed test environment, impact tolerance, and desired deliverable. This skill does not replace individual vulnerability validation; it connects validated or partially validated leads into a higher-impact chain and tracks that chain as a normal finding.

Each exploit chain must use the same finding-tracker states as regular findings:

• discovered: plausible chain hypothesis.
• confident: evidence shows the links compose and the escalated impact is reachable or exploitable.
• proofed: successful triage-verifier run for the combined chain.
• de-escalated: the chain is debunked, duplicate, out of scope, or does not create new impact.

2026 Agent Research Bias