domains / families / security / triage-validation

triage-validation

authentic

Finding validation before writing any report — 7-Question Gate (all 7 questions), 4 pre-submission gates, always-rejected list, conditionally valid with chain table, CVSS 3.1 quick reference, severity decision guide, report title formula, 60-second pre-submit checklist. Use BEFORE writing any report. One wrong answer = kill the finding and move on. Saves N/A ratio.

When to use

• Validating red team findings
• Checking if a bug is in scope
• Assessing vulnerability severity
• Running pre-submission gates
• Checking for known-invalid bug classes
• Verifying impact proof
• Deduplicating findings

When not to use

• Writing the final report
• Stopping the entire engagement
• Authorizing engagement termination

Skill page

Source