← All IntelClip / CybersecurityDeterministic scanners plus LLM review, results back in the PR
From Skill Vector · ≈6:59
Full pipeline worth copying — local iteration, re-scan on upload, regex checks for cheap risks, LLM only where context is needed, findings posted on the PR and emitted as SARIF into vulnerability management.
What’s in it
- Full pipeline worth copying — local iteration, re-scan on upload, regex checks for cheap risks, LLM only where context is needed, findings posted on the PR and emitted as SARIF into vulnerability management.
Clip transcript
request remediation and so on. So what skill vector does in a single page is that when a skill is created or changed not on the during the creation phase one thing that's important is that the engineers are able to use it locally and also be iterating until the skill is being considered safe before uploaded it and after them upload the skill. We also runs it again because we can ensure that the engineer has run locally or has run the most updated version. So we also be scanning that after the upload. And then we have some determinate checks for the uh easiest parts to check some uh easy risks using regular regular expressions and so on. After that when we check that we need better context we then use LLM. Uh it's important to have this hybrid approach with LLM checking the the context but also with the determinist because you know how LLM is depending on the temperature that was set. Sometimes it will check that it's a risk sometimes it might not. And then all of these findings are reporting the PR that was open to upload the skill. So it will improve the usability since the engineer will have the in the same PR what has to be changed before uploading the skill. And another good thing that we made that's important is to have a serif with all of these so it can be consumed by our security tools as well and generate a report on the risks and be part of our vulnerability management program. So depending on the severity, depending on the policy, uh the skill can require some remediation, can be blocked, all of this before the marketplace distribution.
Comments
Sign in to comment.
Loading comments…