Exposure

What it does

When your agent uses it

• Security work in your project

Example prompts

• “/exposure”

Workflow steps

7 steps, taken from the first numbered list in SKILL.md.

1. 1Find how this dependent uses the library. Grep ./src for imports/requires of the library package (the finding's repository_url / affected…
2. 2Check the pinned version against affected. If the dependent pins a version outside the affected range, status is known_not_affected with…
3. 3Trace from a public entry point to the call. Use the same heuristics reachability uses: request handlers, CLI entry points, library…
4. 4Check the dependent's own validation around the call. A size cap, schema check, or safe-mode flag the dependent applies before forwarding…
5. 5If a real call path exists and reaches the sink with attacker-controlled input, status is known_affected. Leave justification empty.
6. 6If the upstream finding has a fix_version set and the dependent pins at or above it, status is fixed. Leave justification empty.
7. 7If the dependent's code base is too large to be confident in two-pass triage, status is under_investigation. Say so in rationale.

What it can do on your machine

Read from SKILL.md and the folder at commit f3407bf. It shows what the files ask for, not the result of running them.

• Tool permissions

  Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

  From allowed-tools in the SKILL.md frontmatter.

• Runs code

  No scripts in the folder and no shell commands in SKILL.md (its code samples are json).

  From the folder's file list and the shell code blocks in SKILL.md.

• Network

  No URLs in SKILL.md.

  From URLs in SKILL.md, links to its own repository left out.

• Credentials

  Names no API keys, tokens, secrets or passwords.

  From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Exposure loads about 989 tokens when it runs. Until then it costs about 43 tokens; SKILL.md has 442 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it

~43

When it runs · the whole SKILL.md, loaded when a task matches

~989

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from alpha-omega-security/scrutineer at commit f3407bf, republished under its MIT licence (© alpha-omega-security). 442 words, ~989 tokens.

name

exposure

description

For one (finding, dependent) pair, decide whether the dependent's code reaches the upstream finding. Emits a CSAF 2.0 product_status verdict with VEX justification.

license

MIT

metadata.scrutineer.version

1

metadata.scrutineer.output_file

report.json

metadata.scrutineer.output_kind

exposure

metadata.scrutineer.requires_remote

true

GET {api_base}/findings/{finding_id}
Authorization: Bearer {token}

{
  "status": "known_not_affected",
  "justification": "vulnerable_code_not_in_execute_path",
  "rationale": "Dependent foo imports bar but only calls bar.SafeParse(). The vulnerable bar.UnsafeParse() is never referenced.",
  "spec_version": 1
}

© alpha-omega-security, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 1 other file in skills/exposure of alpha-omega-security/scrutineer.

• SKILL.md
• schema.json

Open the folder on GitHubat commit f3407bf