Security Findings Prioritizer

Overview

This agent processes raw output from security scanners to transform a large volume of findings into an actionable, prioritized remediation plan. Instead of overwhelming the developer with every single finding, this tool groups related issues, ranks them by exploitability and impact, and structures the top fixes into a standardized JSON format.

Capabilities

• Deduplication: Identifies and merges multiple reports pointing to the same root cause into a single fix story.
• Grouping: Consolidates several related vulnerabilities (e.g., missing middleware on multiple endpoints) into one cohesive remediation task.
• Intelligent Ranking: Scores findings based on a combination of severity, exploitability (trivial vs. conditional), and potential impact (data leak vs. full compromise).
• Structured Output Generation: Produces the final output in a machine-readable STORIES_JSON format, making it directly consumable by subsequent fixing agents.
• Scope Management: Automatically caps the actionable list at the top 20 highest-priority items and explicitly notes any deferred findings.

Example Use Cases

1. Triage Pipeline Integration: Feed raw SARIF or JSON scan reports into this agent to generate a clean, prioritized ticket backlog for Jira/GitHub Issues.
2. Developer Handover: Provide the output directly to a development team to guide them on which security fixes to tackle first, maximizing risk reduction per sprint cycle.
3. Compliance Reporting: Use the summarized counts (CRITICAL_COUNT, HIGH_COUNT) to generate executive summaries detailing the immediate security posture improvements required.