triage-finding Skill
Triage supplied or imported security findings against a repository using its security policy and static code evidence. Accepts scanner reports, advisories, GitHub findings, and Jira or Linear tickets. Do not use for discovery, duplicate triage, runtime validation, or fixes. Published by openai in plugins.
Decision snapshot
Is this a fit?
Security review, Research, Includes SKILL.md, Reusable instructions
Compatibility not yet detected.
Permission behavior not yet detected.
Copy skill directory
22 days ago
No specific cautions were detected. Review the source and requested permissions before installing.
What is triage-finding Skill?
Triage supplied or imported security findings against a repository using its security policy and static code evidence. Accepts scanner reports, advisories, GitHub findings, and Jira or Linear tickets. Do not use for discovery, duplicate triage, runtime validation, or fixes. Published by openai in plugins. This profile combines repository metadata with install, compatibility, and usage signals so developers can quickly decide whether it fits their agent workflow before opening the source repository.
Automated repository signals based on public metadata such as recency, license, installation evidence, and adoption. These are not a security audit or endorsement. See how SkillIndex evaluates profiles.
Key capabilities
- Includes SKILL.md support
- Reusable instructions support
- Security review
- Research
- Security review use cases
- Research use cases
Declared skill metadata
- Source file: plugins/codex-security/skills/triage-finding/SKILL.md
These fields retain source and confidence evidence from the indexed SKILL.md.
Compatibility and setup
- Install or run with Copy skill directory
When to use triage-finding Skill
- Use it for security review.
- Use it for research.
Built with
Editorial notes
Source
- Creator: openai
- Repository: openai/plugins
- Skill file: plugins/codex-security/skills/triage-finding/SKILL.md
What it does
Triage supplied or imported security findings against a repository using its security policy and static code evidence. Accepts scanner reports, advisories, GitHub findings, and Jira or Linear tickets. Do not use for discovery, duplicate triage, runtime validation, or fixes.
Skill instructions
Triage finding Return one static-evidence verdict per supplied finding: confirmed, notactionable, or needsreview. Rank confirmed and needsreview findings separately by exploitability. Preserve input order and duplicate-looking inputs. Work inline. Do not delegate, use deep triage mode, search for unrelated vulnerabilities, edit repository files, or run tests, builds, applications, PoCs, or dynamic validation. State the limits of static evidence; do not claim runtime validation or exhaustive coverage. Intake Accept SARIF results, CVEs, advisories, scanner tickets, bug bounty reports, Codex Security artifacts, and freeform vulnerability claims. If no finding is supplied, ask for one before inspecting code or emitting triage-finding/v0. Ask about the repository or claim only when it is too vague to inspect; otherwise record missing facts as proof gaps. Jira and Linear intake Use this skill for security or vulnerability Jira/Linear tickets. Atlassian and Linear mentions are connector hints
Verified compatibility and discovery
Frequently asked questions
What is triage-finding?
triage-finding is a open-source AI agent skill with Copy skill directory. Triage supplied or imported security findings against a repository using its security policy and static code evidence. Accepts scanner reports, advisories, GitHub findings, and Jira or Linear tickets.
Who is triage-finding best for?
triage-finding is best for reusing agent instructions, scripts, and references, security review workflows, research workflows.
How do I install triage-finding?
Install or run triage-finding using Copy skill directory. Check triage-finding for the latest setup command.
Is triage-finding actively maintained?
triage-finding may need a closer maintenance check before production use.
Project health auto-fetched from the source repository.
Maintain this resource?
Review this source-backed profile, send a correction with evidence, or link to it from your documentation. Claims verify your relationship to the project; profile facts still require source evidence and editorial review.
