What problem does it solve? During adversarial security reviews, multiple review capabilities often flag the same underlying vulnerability as separate findings, cluttering the consolidated report with duplicates. This Skill links two or more findings as the same issue so the report collapses them into a single entry. ## Core Features & Use Cases - Finding Deduplication: Link two or more finding IDs (e.g. code-0007 adv-0002) so they render as one consolidated entry with a "Detected by" line listing every contributing capability. - Human-Verified Linking: Before linking, the Skill reads each finding's description and evidence from findings.json and summarizes why they appear to be duplicates, keeping the merge decision reviewable. - Error Guidance: If an unknown finding ID is supplied, it identifies the invalid ID and suggests running /security-report to list valid IDs. - Use Case: A static-analysis pass and an adversarial review both flag the same SQL injection in a repository. Run the link command with both finding IDs so the final security report shows one issue instead of two unrelated findings. ## Quick Start Ask the assistant to link findings code-0007 and adv-0002 as the same underlying security issue.
