ghost-validate

Know whether a security finding is real and why.

vulnerability validation

What it does

Determine whether a security finding is a true or false positive and provide supporting evidence.

When to use it

Use when the user asks to validate, confirm, or triage a security vulnerability finding.

Give it a security finding as pasted text or a file path; it returns a determination with supporting evidence.

What you provide

This skill

live application

Write

Sends exploit requests to applications

reaper proxy

Execute

Starts a scoped reaper proxy

An accessible live instance enables optional validation through live interaction.

A legitimate user account is needed to authenticate for optional live validation.

The optional live-validation path starts reaper proxy and uses reaper to retrieve captured evidence.

Delegates optional live exploitability testing to the proxy skill when a live application is accessible.