一句话：首次将漏洞 PoC 可用性作为核心问题，构建四阶段流水线诊断并修复生态，显著提升可复现、补全、关联与跨版本验证指标。
漏洞 PoC 是可执行证据，用于确认漏洞真实可达、抑制误报、验证补丁和判断可利用性；其价值取决于可用性（可获取、完整、正确关联、可复现），但此前未被度量。本论文覆盖 13 个平台、298K CVE、470K+ PoC，发现生态在四维度均失败，并首次将 PoC 可用性作为一等问题，提出四阶段流水线：诊断、补全、关联和跨版本验证。评估结果：agentic 复现将直接可复现率从 28.0% 提至 78.7%；多源补全准确率 91.3%；语义链接恢复 Recall@10 为 96.3%；静态跨版本触发验证准确率 94.3%。部分修复产物已被 CNA 和平台维护者纳入官方 CVE 记录。
Vulnerability Proof-of-Concepts (PoCs) are the executable evidence that a disclosed vulnerability is real and reachable, the artifact defenders use to suppress false positives, verify patches, delimit affected versions, and judge exploitability. Their value hinges not on whether a PoC exists but on whether it is usable: available, complete, correctly linked to a vulnerability record, and reproducible. That had never been measured. This thesis conducts the largest PoC study to date, covering 470K+ PoCs over 298K CVEs across 13 platforms, and finds an ecosystem that fails on all four counts. It is the first work to treat PoC usability as a first-class problem: a four-stage pipeline diagnoses the ecosystem, then repairs it by completing, linking, and cross-version validating PoCs. All four stages are implemented and evaluated, and every figure below is measured: agentic reproduction lifts directly reproducible PoCs from 28.0% to 78.7%; multi-source completion repairs incomplete reports at 91.3% accuracy; semantic link recovery restores severed PoC↔CVE links at 96.3% Recall@10; and static validation decides cross-version triggerability at 94.3% accuracy. Hundreds of the repaired artifacts have already been accepted by CNAs and platform maintainers into official CVE records, external confirmation beyond this thesis’s own evaluation.