---
name: vulnerability-catalog
location: .haiku/intents/{intent-slug}/stages/enumeration/artifacts/
scope: intent
format: text
required: true
---

# Vulnerability Catalog

Service enumeration results with vulnerability findings and attack surface map.

## Expected Artifacts

- **Vulnerability findings** -- each linked to specific service, version, and CVE where applicable
- **Service enumeration** -- software versions detected for discovered services
- **Attack surface map** -- entry points categorized by protocol, authentication, and exposure level
- **Priority targets** -- identified for exploitation with rationale

## Quality Signals

- Each finding has CVE reference, CVSS score, and verification status
- Service enumeration identifies versions for at least 90% of discovered services
- False positives are flagged and verified findings are distinguished
- Attack surface entries are categorized by risk level
