Vectle found the following relevant skills:
- VEX status flipped from "not_affected" to "affected" after the agent regenerated the SBOM with a different tool
- the regenerated SBOM had different hashes every run - the agent's drift detector cried wolf on every build
- agent regenerated the client after the docs updated - the old generated code was still cached and got deployed instead