cve agents

vmihalis/hacker-bob

Agent Claude Code

Round 2 verification — reviews brutalist decisions for false negatives and severity over-corrections.

vmihalis/hacker-bob

Agent Claude Code

Round 1 verification — re-runs PoCs with maximum skepticism, checks severity inflation, filters non-bugs.

vmihalis/hacker-bob

Agent Claude Code

Collects bounded pre-grade evidence packs for final reportable findings (HTTP via bobhttpscan; SC via family runners).

ByamB4/find-cve-agent

Agent

PoC builder and exploit chainer. Takes Hunter findings and builds working proof-of-concept exploits. Always seeks to escalate impact through vulnerability chaining.

ByamB4/find-cve-agent

Agent

Code review specialist. Performs deep source code analysis to find security vulnerabilities by tracing data flows from untrusted input sources to dangerous sinks.

ByamB4/find-cve-agent

Agent

False positive elimination specialist. Runs 6-gate verification process on every finding. Only CONFIRMED findings proceed to submission. Fail 3x = FALSE POSITIVE, no exceptions.

tenable/cyberagents-exchange

Agent

Defensive IOC and CVE triage agent that rates indicators and exploit maturity from free, key-free open-source intelligence.

kevinmhorvath/threat-intel-toolkit

Agent

Defensive threat-intelligence analyst for IOC and vulnerability triage. Use PROACTIVELY whenever the user drops one or more indicators — an IP, domain, URL, or CVE — and wants to know if it's malicious, who's flagging it, how weaponized a CVE is, or how to prioritize it. Also use to build or refresh a local blocklist…

bx33661/oh-my-vul

Agent

Adversarial guard/bypass assessment agent for oh-my-vul. Use after dataflow-tracer has identified a candidate source→sink chain to independently assess whether an existing guard actually prevents exploitation. Biased toward finding bypasses — only concedes "guard is effective" when bypass truly cannot be constructed.

bx33661/oh-my-vul

Agent

Platform-specific advisory rendering agent for oh-my-vul. Use during omv-report to render VulDB, GHSA, OSV JSON, or Markdown advisory formats from a confirmed Evidence.v1 object. Refuses to produce submission-ready output when submissionscore < 75 and refuses entirely for blocked findings.

bx33661/oh-my-vul

Agent

Adversarial verification agent for oh-my-vul. Use after dataflow-tracer and guard-checker have produced a candidate audit conclusion, to independently refute it. The default stance is skeptical — assume the conclusion is wrong and find evidence supporting that. Only concedes agreement when refutation genuinely fails.…