# Finding Aggregation

> Aggregate, deduplicate, and classify findings from multiple probes into a coherent vulnerability report.

- Skill: `yogsoth-ai/finding-aggregation` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add yogsoth-ai/finding-aggregation`
- Raw SKILL.md: https://api.skillmd.com/api/skills/yogsoth-ai/finding-aggregation/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Docs & Writing
- Author: yogsoth-ai (https://skillmd.com/u/yogsoth-ai)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/yogsoth-ai/finding-aggregation

---


# Finding Aggregation

Synthesizes findings from multiple attack probes into a coherent, deduplicated report.

## Execution

Subagent — spawned via subagent-spawning/spawn-agent.

## Why Subagent

Aggregation requires neutral analytical stance — neither inflating nor minimizing findings. The aggregator must see patterns across individual probe results.

## Input

- **findings**: All probe results from the campaign
- **attack_metadata**: Metadata about attack coverage (surfaces hit, vectors used, personas deployed)

## Output

- **vulnerabilities**: Deduplicated list classified by severity and type
- **patterns**: Cross-cutting patterns observed across multiple probes
- **coverage_gaps**: Surfaces or dimensions not adequately tested
- **recommendations**: Prioritized hardening actions

<!-- BEGIN available-tables (generated) -->

## Available SOPs

Optional, no fixed order; the final leaf is always a sop.

| SOP | When to use |
| --- | --- |
| spawn-agent | Spawn a customized CC subagent with full MCP tool access. Used by SOPs that declare execution: subagent. |

<!-- END available-tables (generated) -->