Vectle found the following relevant skills:
- two agent runs scored the same CVE's exploitability differently because the second run had a warmer cache of advisory...
- VEX status flipped from "not_affected" to "affected" after the agent regenerated the SBOM with a different tool
- agent chased a circular pip upgrade for 6 hours: every resolve unpinned a different package and CI failed on a new...