
vulnerability-triage-brocards
Principled framework for triaging vulnerability reports using 7 brocards (rules of thumb). Evaluates incoming CVEs, bug bounty submissions, and security findings against structured dismissal/acceptance criteria before escalating to deeper analysis.
- version
- 0.1.3
- GitHub stars
- 8.1K
Install
/plugin install vulnerability-triage-brocards@trailofbitsRun it inside Claude Code after adding the marketplace with /plugin marketplace add trailofbits/skills.
Sponsors
Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthly
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any language
Details
- Marketplace
- trailofbits/skills
- Source
- plugins/vulnerability-triage-brocards
- Author
- Alexis Challande
- Category
- Community
More from trailofbits/skills
All 51- workflow-skill-designv1.0.1
- writing-lean-proofsv0.1.2
- yara-authoringv2.2.1
- zeroize-auditv0.4.2
- agentic-actions-auditorv1.3.2
- ask-questions-if-underspecifiedv1.0.1
- audit-context-buildingv2.0.2
- building-secure-contractsv1.2.2
- burpsuite-project-parserv1.1.2
- c-reviewv2.0.4
- chrome-mcp-troubleshootingv1.1.5
- claude-in-chrome-troubleshootingv1.0.0
- code-improverv1.0.3
- constant-time-analysisv0.2.6
- culture-indexv1.1.6
- cvss-scoringv1.2.0
- debug-buttercupv1.0.0
- devcontainer-setupv0.2.5
- differential-reviewv1.1.4
- dimensional-analysisv3.2.0
- dwarf-expertv1.1.2
- entry-point-analyzerv2.0.0
- firebase-apk-scannerv2.2.3
- fp-checkv1.0.5