agentic-security:security-explain-cve

Use this Skill to translate a CVE into a plain-language summary covering what the vulnerability means, how attackers abuse it, worst-case impact, and concrete fixes.

A GHSA finding describes a specific software vulnerability; this Skill fetches the advisory details and renders the exploitation method, worst-case impact, and remediation steps in plain English.

Yes, you can reference a scanner finding or CWE identifier, and the Skill will provide a structured explainer detailing the vulnerability's meaning, abuse potential, and concrete fixes.

The Skill performs local MCP lookups first to minimize network usage and ensure fast responses, then fetches additional finding explanations only when needed to render the final summary.

It provides concrete fixes alongside a structured narrative explaining the vulnerability, how an attacker abuses it, and the worst-case impact for both technical and non-technical audiences.

You need narrative mode when presenting CVE or GHSA findings to non-technical audiences, allowing them to understand the risk and remediation without needing deep technical knowledge.