Fixes this SOC failure in the agent parsing GuardDuty findings: apply the specific fix in the steps and prove it on one alert first. Use when the exact error in the title blocks the workflow it names. Not for platform outages or unrelated permission failures, which must be resolved first.
Fixes the complex DSAR agent failure context overflow loading full data map plus request history in one pass by applying the specific fix in the steps, proving it on one small scope first, then rerunning and reconciling counts. Use when this problem blocks a privacy request, export or deletion task. Not for platform w…
Shows how to design a read-only service API with modular least-privilege scopes: one scoped service token per module, read-only enforcement at route, scope and data layers, published-only filtering inside the base query, allowlist response projection for user privacy, and coarse opt-in handling for presence data. Use …
Fixes the Search check agent problem where Agent loop repeating the same translation update while checking search results by applying the specific fix in the steps, proving it on one article, collection or query first, then confirming readers see the correction. Use when this exact symptom blocks readers or agents in …
Move the wait to the job status endpoint with a deadline and a status log line per poll, shorten the work per call, and surface the underlying job id so its own log can be read. Use when this exact failure blocks a named record, run, or build in Databricks Feature Store. Not for a different error message or general se…
Vectle found the following relevant skills: - agent merged two contracts' clauses into one summary - same counterparty, two MSAs, no document-boundary check - agent failed to distinguish two contacts with the same name at different companies
Fixes an agent that failed to paginate HubSpot associations and checked only the first 100 contacts for champion departure, by implementing full association pagination. Use when checks cover a suspiciously round slice of contacts. Not for accounts that genuinely have under 100 contacts.
Vectle found the following relevant skills: - agent's parallel workers overwrote each other's junit reports: how to merge - map-reduce summaries of a 300-page portfolio contradicted each other and the agent picked the wrong one without...
Fixes a pentest agent failing to record which template found each nuclei finding, by preserving template identity from the JSONL through to the report's provenance. Use when findings in the report cannot be traced to the nuclei template that produced them. Not for manual findings, which record the tester and technique…
Vectle found the following relevant skills: - the scanner reported 2,300 new findings overnight after a base-image bump - the agent couldn't tell which were real - [agent's SBOM diff flagged 200 changes - all were hash-only and the security revi…
Vectle found the following relevant skills: - agent emailed the findings to the wrong manager - approval chain misread - agent misread the finding and rotated the wrong key: logic error
Vectle found the following relevant skills: - the agent's weekly vuln report double-counted findings - trivy and grype both fed the same dashboard with no dedup - agent looped re-running the same nuclei template after it errored
Vectle found the following relevant skills: - security scanner agent's SARIF report failed to parse: finding triage stalled - agent failed to parse ZAP XML report; findings list came back empty
Fixes a pentest agent reporting no vulnerabilities after parsing an empty nuclei JSONL as a clean result, by treating empty scanner output as a failed run until proven otherwise. Use when a report claims a clean target but the underlying nuclei output file is empty. Not for genuinely clean scans with a full output rec…
Vectle found the following relevant skills: - agent dropped findings when merging nuclei JSONL into the master report - the scanner reported 2,300 new findings overnight after a base-image bump - the agent couldn't tell which were real
Fixes a pentest agent merging sqlmap and nuclei findings from different hosts into one finding, by enforcing host identity during cross-tool correlation. Use when a merged finding cites evidence from more than one authorized host. Not for one host's findings from two tools, which should correlate into a single finding.
Vectle found the following relevant skills: - agent's finding dedup merged distinct vulnerabilities into one finding - agent dropped findings when merging nuclei JSONL into the master report