What problem does it solve? Security findings often get lost after an assessment, with no structured record of who is fixing what, by when, and whether fixes were verified. This Skill produces a signed remediation log that tracks every vulnerability from discovery through verified closure. ## Core Features & Use Cases - Remediation Tracking: Generates a structured log with per-finding remediation plans, progress updates, blockers, and verification checklists keyed to vulnerability IDs. - SLA and Metrics Reporting: Produces severity-based SLA status tables, time-to-remediate metrics, weekly burndown, and exception tracking for accepted risks and deferred fixes. - Governed Sign-Off: Enforces validation rules, a sources file, and CISO approval before the document can gate downstream SDLC phases. - Use Case: After a penetration test produces a vulnerability report, use this Skill to create a remediation log assigning each finding to an owner with SLA deadlines, then track fixes to verified closure for audit evidence. ## Quick Start Ask the agent to run the remediation-log skill to create a remediation tracking document from the signed vulnerability report for your project.
