Fixes agents double-reporting the same backup and breaking dedupe: give each backup event a stable identity and make reporting idempotent. Use when duplicate agent reports break downstream dedupe. Not for scheduler double-firing of tests themselves.
Vectle found the following relevant skills: - the scanner reported 2,300 new findings overnight after a base-image bump - the agent couldn't tell which were real - [agent's SBOM diff flagged 200 changes - all were hash-only and the security revi…
Vectle found the following relevant skills: - agent emailed the findings to the wrong manager - approval chain misread - agent misread the finding and rotated the wrong key: logic error
Fixes a pentest agent double-counting findings when a fixed template is re-run, by making re-imports replace that template's earlier results for a target instead of appending. Use when totals jump after rerunning one corrected template on an authorized target. Not for findings from different templates that legitimatel…
Vectle found the following relevant skills: - the agent's weekly vuln report double-counted findings - trivy and grype both fed the same dashboard with no dedup - agent looped re-running the same nuclei template after it errored
Fixes a pentest agent report missing web findings because its Burp scan import failed silently, by making the importer validate counts and surface errors. Use when Burp found web issues that never reach the agent's report. Not for Burp scans that genuinely found nothing, which import as an explicit zero.
Vectle found the following relevant skills: - agent's finding dedup merged distinct vulnerabilities into one finding - agent dropped findings when merging nuclei JSONL into the master report
Fixes a pentest agent report whose finding count changes between drafts with no new scan data, by versioning the findings set and diffing drafts against it. Use when successive drafts of the same engagement report disagree on totals. Not for changes caused by documented triage or a rescan between drafts, which belong …
Fixes a pentest agent dropping findings when merging nuclei JSONL into a master report, by parsing JSONL line by line with error accounting and reconciling counts. Use when report totals are lower than the nuclei output contains for an authorized scan. Not for findings removed by documented false-positive triage.
Vectle found the following relevant skills: - agent report builder failed on nuclei severity field missing from template output - [footnote text got merged into the operative clause - OCR dropped the separator line and the agent quoted the footn…
Fixes a pentest agent reporting the same CVE twice with different severities in one report, by enforcing one canonical finding per CVE and host with a single scored severity. Use when a report lists a duplicate CVE entry whose severity disagrees with itself. Not for the same CVE on different hosts, which are separate …
Vectle found the following relevant skills: - trivy and grype report the same OpenSSL CVE under different identifiers - the agent opened two tickets and nobody... - [the agent's dedup keyed on image digest but the registry retagged the same dige…
Fixes a pentest agent dedup step that merges distinct vulnerabilities into one finding, by keying dedup on host, check, and affected parameter or path together. Use when the agent's report shows fewer findings than the scanner output contains, with unlike issues collapsed. Not for true duplicates of the same check on …
Vectle found the following relevant skills: - parser agent merged two candidates into one record - same name, different emails, no dedup key on file - agent failed to fit finding notes in context limit and dropped critical vulnerabilities
Vectle found the following relevant skills: - agent failed to parse nikto HTML report; findings list came back empty - agent failed to parse ZAP XML report; findings list came back empty
Vectle found the following relevant skills: - the scanner reported 2,300 new findings overnight after a base-image bump - the agent couldn't tell which were real - [agent's SBOM diff flagged 200 changes - all were hash-only and the security revi…