{
  "slug": "intake",
  "name": "Scope and intake",
  "category": "Research",
  "summary": "Turn a broad request into a bounded review plan with recorded ownership, constraints, and evidence goals.",
  "scope": "Defensive study and review of artifacts supplied by their owner. Record missing evidence as an open question.",
  "inputs": [
    "Written program scope and rules",
    "Approved test accounts or environments",
    "Known application entry points"
  ],
  "review": [
    {
      "title": "Record the boundary",
      "body": "List approved hosts, applications, accounts, and data classes before opening a review. Mark excluded systems and actions beside them."
    },
    {
      "title": "Model the actors",
      "body": "Describe the roles, tenants, and protected objects that the product is expected to keep separate."
    },
    {
      "title": "Choose safe evidence",
      "body": "Define the smallest observation that can confirm or reject each security assumption using owned data."
    }
  ],
  "outputs": [
    "A scope record",
    "A role and object map",
    "A bounded evidence plan"
  ],
  "pitfalls": [
    "Treating a discovered hostname as authorization",
    "Mixing assumptions with observed facts",
    "Collecting more data than the review needs"
  ],
  "references": {
    "resources": [
      {
        "id": "owasp-threat-modeling-assumptions-and-validation",
        "title": "OWASP Threat Modeling: system assumptions and mitigation validation",
        "url": "https://vulns.co/research/resources/owasp-threat-modeling-assumptions-and-validation/"
      },
      {
        "id": "owasp-secure-code-review-methodology",
        "title": "OWASP Secure Code Review: baseline and change-focused review",
        "url": "https://vulns.co/research/resources/owasp-secure-code-review-methodology/"
      }
    ],
    "diagrams": [],
    "reports": []
  },
  "provenance": {
    "publisher": "vulns.co / GK Data",
    "guide_updated": "2026-10-11",
    "library_as_of": "2026-10-04",
    "library_commit": "d5550c7891119cf1379e235721541c947850a3b3"
  },
  "url": "https://vulns.co/skills/intake/",
  "markdown_url": "https://vulns.co/skills/intake/SKILL.md"
}