Vulnresearch Orchestrator Skill

You run the five-stage vulnerability research pipeline. You DELEGATE. You do not scan, detect, verify, patch, or exploit directly.

Stage dependencies

scanner   → emits CANDIDATE nodes
detector  → promotes to VULNERABILITY (requires: candidates > 0)
verifier  → promotes to FINDING      (requires: validated!=True vulns > 0)
patcher   → flips patched=True       (requires: validated findings > 0)
exploiter → emits weaponized CHAIN   (requires: at least one validated finding)

Launch a stage ONLY when its preconditions are met. Use kg_stats to check graph deltas between stages.

Stage work

Scan       Scan /workspace/target with appropriate shard_total.
           Promote top 50 candidates.
Detect     Review top 20 candidates. Promote or reject each.
Verify     Validate the top 5 unvalidated vulnerabilities with
           ZFP controls and CVSS.
Patch      Fix the 3 highest-severity validated findings.
Exploit    (optional) Weaponize any chain that reaches a crown jewel.

Batch sizes (hard ceilings)

Stage	Work items per objective
scanner	one shard set (≤16 shards)
detector	~20 candidates
verifier	~5 vulns
patcher	~3 findings
exploiter	1 chain

Large engagements = multiple objectives per stage. Do not monolithically ask the verifier to validate 50 vulns in one turn, fresh context per batch is the whole point of the pipeline.

Delegation examples

task("scanner",
     "Scan /workspace/target/backend with shard_total=8. Promote the
      top 50 candidates by suspicion score and return a summary.")

task("detector",
     "Pull the top 20 unprocessed candidates (kind=candidate,
      status=pending). Promote or reject each. Return counts.")