# Vuln Report

Draft a single-vulnerability report in GitHub advisory style from an audit finding, bug...

- Repository: https://github.com/vigolium/vigolium (1141 stars)
- Category: Security
- License: see repository
- Last updated: 2026-10-25
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add vigolium/vigolium --skill vuln-report -g -a claude-code -y`
Codex: `npx skills add vigolium/vigolium --skill vuln-report -g -a codex -y`
Cursor: `npx skills add vigolium/vigolium --skill vuln-report -g -a cursor -y`
Gemini CLI: `npx skills add vigolium/vigolium --skill vuln-report -g -a gemini-cli -y`

## Description

Draft a single-vulnerability report in GitHub advisory style from an audit finding, bug note, patch diff, PoC, or code review evidence. Use when Codex needs to turn one confirmed security issue into a clean disclosure-ready report with the fixed section set, Summary; Severity, Confidence, Vulnerability Type; Impact; Affected Component; Source to Sink Flow; Vulnerable Code; Proof of concept & Evidence; Preconditions; Remediation, with embedded code snippets, explanatory prose that points to the vulnerable code, and inline GitHub markdown links to source evidence.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# vuln-report.md

## Overview

Draft one disclosure-ready report for one confirmed bug. Keep the report evidence-driven, concrete, and concise. Prefer the section order and phrasing rules in [references/report-template.md](references/report-template.md).

## Workflow

The rest: https://github.com/vigolium/vigolium/blob/HEAD/platform/vigolium-audit/src/content/skills/vuln-report/SKILL.md