Triage new findings

What this does

Lists SubImage's security rules, groups the ones with findings by tag (theme/category), and produces a triaged digest the user can act on. Surfaces the compliance frameworks a rule belongs to as context where useful, so the user understands which control set is unhappy, not just "rule X has 12 findings".

When to use

✅ User asks for a findings digest, triage, or "what's new". ✅ User wants to know which findings are most urgent or which framework is most off-track. ✅ Used as a recurring prompt for a daily/weekly security brief.

❌ User asks about a specific CVE: use subimage-mcp:investigate-cve instead. ❌ User asks about a specific attack path: use subimage-mcp:review-attack-path. ❌ User wants the underlying graph (relationships, blast radius): build a Cypher query then run with subimageRunCypher.

Prerequisites

The subimageReadMe global tool guide is available. This skill assumes the role-based tools (subimageListRules, subimageRunCypher, optionally subimageSendNotification and subimageCreateTicket) are reachable.