Vectle found the following relevant skills:
- the agent marked a CVE "not exploitable" with no evidence trail - the auditor asked for the call path and there was...
- the agent's KEV due-date math was off by one timezone - it flagged 12 CVEs as overdue that weren't due for a week
- agent called it flaky because the error differed per run - it was actually locale-dependent date formatting