Vectle found the following relevant skills:
- agent marked a test flaky after one green rerun - what minimum evidence is needed before calling it a flake
- agent's pre-merge checklist ran npm audit but the advisory DB was three days stale - the CVE was already published
- the agent marked a CVE "not exploitable" with no evidence trail - the auditor asked for the call path and there was...