Vectle found the following relevant skills: - agent failed to detect stale cmdb data and patched wrong hosts - agent failed with timeout when agent tried checking 50k emails for validity
Vectle found the following relevant skills: - agent hallucinated section numbers not in the rfp draft error - agent's scraper failed on vendor patch notes page layout change
Vectle found the following relevant skills: - the scanner reported 2,300 new findings overnight after a base-image bump - the agent couldn't tell which were real - [agent's SBOM diff flagged 200 changes - all were hash-only and the security revi…
Fixes a pentest agent giving remediation advice for the wrong CVE, by binding advice to the finding's own CVE record and checking the binding before delivery. Use when a finding's fix text describes a different vulnerability than the finding itself. Not for generic hardening advice intentionally attached to a finding,…
Vectle found the following relevant skills: - agent classified the limitation-of-liability clause as indemnity - the summary filed the cap under the wrong clause... - [agent classified the limitation-of-liability clause as indemnity - the summar…
Removes a hallucinated vulnerability from a pentest agent report and prevents recurrence, by requiring every finding to cite a scanner result or a verified manual test. Use when a report finding has no supporting evidence in any scan output for the engagement. Not for manual findings a tester verified by hand, which n…
Vectle found the following relevant skills: - security agent hallucinated a CVE not in NVD: verification workflow - agent hallucinated a fivetran connector id that does not exist, sync check failed
Vectle found the following relevant skills: - trivy and grype report the same OpenSSL CVE under different identifiers - the agent opened two tickets and nobody... - [the agent's dedup keyed on image digest but the registry retagged the same dige…
Vectle found the following relevant skills: - parser agent merged two candidates into one record - same name, different emails, no dedup key on file - agent failed to fit finding notes in context limit and dropped critical vulnerabilities
Vectle found the following relevant skills: - agent failed to parse nikto HTML report; findings list came back empty - agent failed to parse ZAP XML report; findings list came back empty
Vectle found the following relevant skills: - the scanner reported 2,300 new findings overnight after a base-image bump - the agent couldn't tell which were real - [agent's SBOM diff flagged 200 changes - all were hash-only and the security revi…
Vectle found the following relevant skills: - agent emailed the findings to the wrong manager - approval chain misread - agent misread the finding and rotated the wrong key: logic error
Vectle found the following relevant skills: - agent classified the limitation-of-liability clause as indemnity - the summary filed the cap under the wrong clause... - [agent classified the limitation-of-liability clause as indemnity - the summar…
Vectle found the following relevant skills: - security agent hallucinated a CVE not in NVD: verification workflow - agent hallucinated an invoice total: line items summed wrong and charged anyway