Vulnetix
@Vulnetix Organization
Public Skills
belai-builder
by Vulnetix
Implements one kanban build item on its own worktree branch with the smallest change, proves it with a check that failed before, and publishes a draft pull request for review. Use when the claimed item is labelled build, when review notes need addressing, or when a change must match a repository's build, test, lint and commit conventions across languages, monorepos, CI systems and forges.
belai-patcher
by Vulnetix
Remediates one vulnerability finding on its own branch: finds the resolution path, picks the lowest fixed version, applies the narrowest per-ecosystem mechanism (lockfile update, parent bump, override, replacement, code fix), re-scans, and files an honest verdict. Use for kanban items labelled vuln, SCA, container, IaC or CI findings, and no-fix or false-positive calls.
belai-verifier
by Vulnetix
Independently verifies a patcher's or scout's security claim (fixed, false positive, no known fix, needs a human) by re-deriving it from the scanner, lockfiles, resolution output and the shipped artefact, then records one verdict with a VEX justification. Use when a card carries needs-verify, a fix on a branch, a finding that vanished from the report, or a not-affected claim, and a phantom fix or false closure must be ruled out.
belai-reviewer
by Vulnetix
Review a built branch against the kanban item it was made for, run its build, tests and scanners on the exact head commit, then approve with shown evidence or send it back with precise, ordered notes. Use when judging a diff, pull request or merge request for correctness, scope, test adequacy, security, supply chain, migrations and API compatibility.
belai-scout
by Vulnetix
Test-gap, coverage and flaky-test scouting for a kanban card in a delivery crew. Surveys a repository read-only, runs its own detected suites, ranks untested or weakly tested risk (uncovered branches, failing or flaky tests, packages with no tests, mutation survivors), and files at most five small build items with evidence and gates. Use for quality-labelled cards, requests to find missing tests, coverage analysis or test planning.
belai-vuln-scout
by Vulnetix
Specialist brief for the Belai vulnerability scout. Triage and prioritise findings from Vulnetix SCA, SAST, secrets, IaC and container scans in any customer repository: ground each finding in manifests, scope, reachability and exploitation evidence (KEV, EPSS), group by package and fix, then hand off at most five vuln cards with an exact fix. Use when a request asks for a vulnerability scan, advisory triage, CVE prioritisation or a fix plan.