Application_Security / tools / tool editor

application__query_vulnerabilities

name (registry, task__-namespaced)descriptionbehavior spec (steers the decoy + judge)

JSON Schema (arguments)✓ valid · 11 props · 0 required

{
  "type": "object",
  "required": [],
  "properties": {
    "limit": {
      "type": "integer",
      "default": 50,
      "maximum": 1000
    },
    "query": {
      "type": "string",
      "description": "Free-text search across vulnerability titles and descriptions"
    },
    "cwe_id": {
      "type": "array",
      "items": {
        "type": "string"
      }
    },
    "offset": {
      "type": "integer",
      "default": 0
    },
    "status": {
      "type": "array",
      "items": {
        "enum": [
          "open",
          "in_progress",
          "resolved",
          "false_positive",
          "accepted_risk"
        ],
        "type": "string"
      }
    },
    "severity": {
      "type": "array",
      "items": {
        "enum": [
          "critical",
          "high",
          "medium",
          "low",
          "info"
        ],
        "type": "string"
      }
    },
    "application_id": {
      "type": "string"
    },
    "cvss_score_max": {
      "type": "number",
      "maximum": 10,
      "minimum": 0
    },
    "cvss_score_min": {
      "type": "number",
      "maximum": 10,
      "minimum": 0
    },
    "discovered_after": {
      "type": "string",
      "format": "date-time"
    },
    "discovered_before": {
      "type": "string",
      "format": "date-time"
    }
  }
}

registry name changes propagate to the decoy surface on the next drain