> [!IMPORTANT]
> **AI Assist Note (Knowledge Heritage)**:
> This document is part of the "Sovereign Reality" documentation.
> - **@docs ARCHITECTURE:Infrastructure:Execution**
> - **Failure Path**: Information drift, legacy terminology, or documentation mismatch.
> - **Telemetry Link**: Cross-reference with `execution/parity_guard.py` results.
>
> ### AI Assist Note
> Core technical resource for the Tadpole OS Sovereign infrastructure.
>
> ### 🔍 Debugging & Observability
> Traceability via `execution/parity_guard.py`.

---
name: vulnerability-scanner
description: Vulnerability analysis. OWASP 2025, Supply Chain, Attack Surface.
allowed-tools: Read, Glob, Grep, Bash
---

# Vulnerability Scanner

**Scanner + Expert Thinking.**

## Core Principles
1.  **Assume Breach**.
2.  **Zero Trust**.
3.  **Least Privilege**.

## OWASP Top 10:2025
- **A01 Access Control**: IDOR, SSRF.
- **A02 Misconfig**: Defaults, Cloud.
- **A03 Supply Chain**: Deps, CI/CD.
- **A04 Crypto**: Weak/Exposed.
- **A05 Injection**: SQLi, Cmd.
- **A06 Design**: Flawed arch.
- **A07 Auth**: Sessions.
- **A08 Integrity**: Updates/Data.
- **A09 Logging**: Blind spots.
- **A10 Exceptional**: Error handling/Fail-open.

## Scanning Methodology
1.  **Recon**: Map stack/entry points.
2.  **Discovery**: Config/Dep/Code analysis.
3.  **Analysis**: Validate, Prioritize.
4.  **Report**: Repro, Impact, Fix.

## Risk Prioritization
- **Critical**: Exploited (EPSS > 0.5) OR High Impact/Likelihood.
- **High**: CVSS > 9.0.
- **Medium**: CVSS 7-9.

---

## 🧠 Aletheia Reasoning Protocol (Risk)

### 1. Generator (Threat ID)
*   **Source**: "Scanner found CVE?".
*   **Vector**: "Is it used?".
*   **Exposure**: "Internet facing?".

### 2. Verifier (Reality)
*   **False Positive**: "Library unused?".
*   **Mitigation**: "WAF blocks it?".
*   **Proof**: "Trigger safely?".

### 3. Reviser (Priority)
*   **Score**: "Internal only = Lower risk".
*   **Action**: "Patch vs Schedule".

---

## 🛡️ Security & Safety Protocol (Scanning)

1.  **Authorization**: Own targets only.
2.  **Availability**: No DoS.
3.  **Reporting**: Encrypt findings.
4.  **Compliance**: Retention policies.

[//]: # (Metadata: [SKILL])
