Improvements to H1 Audit skill

.claude-plugin/marketplace.json

@@ -54,7 +54,7 @@
     {
       "name": "bitwarden-security-engineer",
       "source": "./plugins/bitwarden-security-engineer",
-      "version": "1.2.0",
+      "version": "1.3.0",
       "description": "Application security engineering assistant for vulnerability triage, threat modeling, and secure code analysis."
     },
     {

.cspell.json

@@ -10,6 +10,7 @@
     "appsettings",
     "architecting",
     "askable",
+    "aspirationally",
     "ASVS",
     "atlassian",
     "Bitwarden",
@@ -56,6 +57,7 @@
     "grype",
     "hackerone",
     "hardBreak",
+    "heredocs",
     "HMAC",
     "hotspot",
     "hotspots",

README.md

@@ -16,7 +16,7 @@ A curated collection of plugins for AI-assisted development at Bitwarden. Enable
 | [bitwarden-devops-engineer](plugins/bitwarden-devops-engineer/)     | 0.1.4   | DevOps engineering assistant: workflow compliance linting, action security auditing, and org-wide CI/CD remediation                                         |
 | [bitwarden-init](plugins/bitwarden-init/)                           | 1.2.0   | Initialize and enhance CLAUDE.md files with Bitwarden's standardized template format                                                                        |
 | [bitwarden-product-analyst](plugins/bitwarden-product-analyst/)     | 0.1.5   | Product analyst agent for creating comprehensive Bitwarden requirements documents from multiple sources                                                     |
-| [bitwarden-security-engineer](plugins/bitwarden-security-engineer/) | 1.2.0   | Application security engineering: vulnerability triage, threat modeling, and secure code analysis                                                           |
+| [bitwarden-security-engineer](plugins/bitwarden-security-engineer/) | 1.3.0   | Application security engineering: vulnerability triage, threat modeling, and secure code analysis                                                           |
 | [bitwarden-software-engineer](plugins/bitwarden-software-engineer/) | 1.0.0   | Software engineer agent for a Bitwarden product team. Implements stories, tasks, and bugs with code quality, performance, security, and team comms in mind. |
 | [claude-config-validator](plugins/claude-config-validator/)         | 1.1.1   | Validates Claude Code configuration files for security, structure, and quality                                                                              |
 | [claude-retrospective](plugins/claude-retrospective/)               | 1.1.1   | Analyze Claude Code sessions to identify successful patterns and improvement opportunities                                                                  |

plugins/bitwarden-security-engineer/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "bitwarden-security-engineer",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "Application security engineering assistant for vulnerability triage, threat modeling, and secure code analysis at Bitwarden.",
   "author": {
     "name": "Bitwarden",

plugins/bitwarden-security-engineer/CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to the `bitwarden-security-engineer` plugin will be document
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.3.0] - 2026-07-10
+
+### Changed
+
+- `auditing-hackerone-vulns` skill: stopped excluding `Verified` VULN tickets from the audit query. A Verified VULN has had its fix confirmed in production but the Jira ticket still needs to be moved to `Closed`, and previously these dropped out of the report entirely. They now surface under a new 🏁 Close Out action token so the remaining status flip isn't forgotten. Verified tickets skip the child-item and GitHub release-inclusion steps since the fix is already confirmed.
+
 ## [1.2.0] - 2026-05-08
 
 ### Added