alinux-cve-query

Query the Alas API to identify Alinux CVE impact and patch status.

327|85|Updated Mar 30, 2026
One-click install
npx skills add https://github.com/alibaba/anolisa --skill alinux-cve-query
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: alinux-cve-query
Source: https://github.com/alibaba/anolisa/tree/main/src/os-skills/security/alinux-cve-query
Command: npx skills add https://github.com/alibaba/anolisa --skill alinux-cve-query

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

本技能帮助用户快速了解 Alinux 产品的 CVE 漏洞信息,判断潜在影响并获取修复状态和安全公告。

Core Features & Use Cases

  • 支持从公开漏洞数据库提取 CVE 基本信息、CVSS 评分、影响版本和受影响的软件包。
  • 自动给出修复状态及 SA 公告编号,并提供本地环境的可操作建议。
  • Use Case: 安全团队在评估新 CVE 时,快速确认是否影响当前的 Alinux 版本及需要的缓解措施。

Quick Start

Provide a CVE ID and retrieve its impact, status, and SA bulletin for Alinux.

Frequently Asked Questions about alinux-cve-query

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check CVE patch status and impact on Alinux systems?

To check CVE patch status on Alinux, provide a CVE ID to query the Alas API, which returns the CVSS score, impact level, affected packages, status, and SA bulletin for your specific version.

How do I find the SA bulletin number for a specific CVE affecting Alinux?

Finding the SA bulletin number for an Alinux CVE requires submitting the CVE ID, which parses the Alas API response to extract and present the associated security advisory reference alongside the release date.

Can I verify if a specific CVE exists and affects my Alinux version?

You can verify CVE existence and impact on Alinux versions by querying the Alas API endpoint with the specific CVE ID to retrieve affected package details and current vulnerability status.

What CVE vulnerability information is available for Alinux products?

CVE vulnerability information for Alinux products includes basic CVE details, CVSS scores, impact levels, affected software packages, current patch status, and SA bulletin references extracted from the public vulnerability database.

How do I get actionable remediation advice for an Alinux CVE?

To get actionable remediation advice for an Alinux CVE, query the CVE ID to retrieve its patch status and SA bulletin, which provides the baseline for applying necessary environment-specific mitigation measures.

Does querying Alinux CVEs require any specific dependencies or environment setup?

Querying Alinux CVEs requires no specific dependencies or environment setup, as the skill directly queries the public Alas API endpoint using only the provided CVE ID to fetch vulnerability data.