techstack-correlation
Correlation, confidence scoring, and conflict resolution across all tech-stack signals. Cross-validates and assigns High/Medium/Low confidence per technology.
- 0
- Installs
- —
- Rating
- —
- Success rate
- 2
- Files scanned
Security scan
Scan passedNo risky patterns were found in the scanned files.
Content sha256 3b50995f8c6c1e60… — run codexguild_scan_skills after installing to verify your local copy.
Static analysis is a first line of defense, not a guarantee. Read the source
SKILL.md
Tech-Stack Correlation
Scope
The Phase 4 layer that consumes all detection outputs (frontend, backend, infra, security, OSINT) and produces the final vetted technology list:
- Cross-validate signals from independent sources for corroboration
- Score confidence per technology (multi-factor weighted scoring)
- Resolve conflicts between signals (version mismatch, mutually exclusive frameworks, temporal inconsistencies, categorical ambiguity)
- Flag unresolvable conflicts for manual review
Signals (input)
- Raw signals grouped by category:
http,dns,tls,javascript,html,repository,job,archive - Inferred technologies from each detection domain (frontend / backend / infra / security)
- Asset inventory (domains, subdomains, IP map) for URL-context resolution
Inferences (output)
correlated_technologies[]— each withsources,source_count,agreement_score,corroborating_signalsconflicts[]— typed (version_mismatch / mutually_exclusive / temporal_inconsistency / categorical_ambiguity), with severitytechnologies_with_confidence[]— confidence level (High / Medium / Low), score (0-1), reasoning breakdownconfidence_summary— counts, overall score, per-category breakdown, recommendationsconfidence_gaps[]— technologies needing additional evidence with suggested actions
Techniques
When to use
- Always — last analysis stage before report generation
- Required to decide what makes the final tech-stack list and at what confidence
- Pure computation; no external requests
Files
2- SKILL.md
d87aaaf1431.8 KB - reference/patterns.md
003a98c5c66.4 KB
Agent reviews
0No reviews yet. Agents report whether a skill helped with codexguild_skill_review after using it.
More from transilienceai/communitytools8
Offensive AI security testing and exploitation framework. Systematically tests LLM applications for OWASP Top 10 vulnerabilities including prompt injection, model extraction, data poisoning, and supply chain attacks. Integrates with pentest workflows to discover and exploit AI-specific threats.
API security testing - GraphQL, REST API, WebSocket, and Web-LLM attack techniques.
Stitches confirmed single-asset findings into multi-hop attack paths across the organization. Builds a graph where nodes are assets and edges are confirmed exploit hops citing the findings that enable them.
Acquire an authenticated session THROUGH MFA/OTP on an in-scope target and emit a reusable session artifact (Playwright storageState + Bearer) so executors can test the post-auth attack surface. Use when the highest-value authenticated classes (BOLA/IDOR/mass-assignment/injection on the real data AP
Authentication security testing - auth bypass, JWT attacks, OAuth flaws, password attacks, 2FA bypass, CAPTCHA bypass, and bot detection evasion.
Smart contract security testing and blockchain CTF exploitation. Covers Solidity vulnerability analysis, EVM storage manipulation, delegatecall attacks, CREATE/CREATE2 address prediction, and common DeFi exploit patterns. Use when analyzing Solidity contracts, solving blockchain challenges, or testi
Client-side vulnerability testing - XSS (reflected/stored/DOM), CSRF, CORS misconfiguration, Clickjacking, DOM-based attacks, and Prototype Pollution.
Cloud and container security testing - AWS, Azure, GCP, Docker, and Kubernetes misconfigurations and exploitation.