Harness-engineering security-vulnerability-disclosure

name: security-vulnerability-disclosure version: '1.0.0' description: Responsible disclosure, CVE process, coordinated vulnerability disclosure, and managing the lifecycle from discovery to public advisory stability: static cognitive_mode: advisory-guide type: knowledge tier: 3 triggers:

• manual platforms:
• claude-code
• gemini-cli
• cursor
• codex tools: [] paths: [] related_skills:
• security-incident-containment
• security-post-incident-review
• security-penetration-testing
• owasp-logging-monitoring stack_signals: [] keywords:
• vulnerability disclosure
• responsible disclosure
• coordinated disclosure
• CVE
• security advisory
• bug bounty
• PSIRT
• security.txt
• disclosure policy
• vendor notification metadata: author: community state: persistent: false files: [] depends_on: []