deep-dive

Deep Dive

Deliver a focused follow-up analysis for a topic slug referenced in a recent brief.

Input

The argument is the slug from the brief CTA (e.g., local-first-sync, apex-one-zero-day).

Steps

1. Resolve the item. Glob .hermit/briefs/ for files from the last 14 days (sort by date, newest first). Scan each for the slug (case-insensitive substring match against the brief body). Extract the surrounding paragraph — the item's headline, description, any URL, and its category/tags.

2. Web research. Using the URL and headline from the brief (if found), run 1–2 targeted WebFetch calls to reach the primary source. If no URL is available, use the slug as a search hint. Collect what the analysis template needs: what happened, key facts/dates, current status, and (for security items) CVE/CVSS, affected versions, exploitation status, patch status.

3. Write the analysis. ≤10–15 lines. Pick the template by the briefed item's nature:

   Default (general follow-up) — for any non-security item:

   **Deep dive: <slug>**
   
   **What happened:** One–two sentences on the development and its context.
   **Why it matters:** Concrete stakes — who's affected, what decision it informs.
   **Trajectory:** Where this is heading; what to watch next.
   **Sources:** Primary link(s) and any useful discussion.
   

   Security variant — use ONLY when the briefed item is security-tagged (its category/tags in the brief indicate security, or it's a vulnerability/exploit/breach item):

   **Deep dive: <slug>**
   
   **What it is:** One sentence — vulnerability type, product, CVE if applicable.
   **Severity:** CVSS score (if known) + exploitation status.
   **Who's affected:** Systems/versions/configs at risk.
   **What attackers can do:** Concrete impact (RCE, cred theft, privilege escalation, etc.).
   **Exploitation status:** PoC public / in-the-wild / CISA KEV / theoretical.
   **Patch/mitigation:** Version to upgrade to, workaround if patch unavailable.
   **Timeline:** Disclosed → PoC → exploitation → patch (key dates only).
   **Bottom line:** One sentence — patch now / monitor / low priority.