Tools provided
Tools the agent exposes — your AI client calls them automatically when it needs them.
- run_full — Run the full triage pipeline: fetch Dependabot alerts, re-prioritize deterministically, file Jira tickets for criticals, post Slack summary.
- fetch_alerts — Fetch raw Dependabot security alerts for one or more repositories. Mock fixtures used without a live GitHub token.
- prioritize_vulnerabilities — Deterministic re-prioritization of a list of alerts by CVSS + exploitability signals. No LLM.
- create_jira_tickets — File Jira tickets for critical/high-priority vulnerabilities with pre-filled remediation guidance. Never auto-merges or applies fixes.
- post_slack_summary — Post the daily vulnerability triage summary to a Slack security channel.
- discover_intent — Understand your goal and co-design the exact input via clarifying questions before running.
- plan_inputs — Plan/brainstorm the inputs for a tool: returns questions, schema and a ready-to-edit example.
- list_capabilities — List the agent's tools, credential slots and guardrails.
