triageshield

Verify a vulnerability report's concrete, checkable claims (file paths, `file.py:123` line citations, function names) against a real GitHub repo's current default-branch state. Does NOT judge whether the described vulnerability is real or exploitable -- it only checks whether the files/lines/functions cited actually exist, which is the exact 'AI slop' failure mode (hallucinated specifics) that makes up a real share of auto-generated vuln reports. A PLAUSIBLE verdict means the claims check out, not that the vulnerability is confirmed real.

{'type': 'object', 'required': ['report', 'repo'], 'properties': {'repo': {'type': 'string', 'description': 'A github.com/owner/name URL for the repo the report claims to be about'}, 'report': {'type': 'string', 'description': 'The vulnerability report text to check'}}}