Identify CVEs affecting repositories and determine exposure and remediation options.
npx skills add https://github.com/mdmagnuson-creator/yo-go --skill cve
Please help me install this Agent Skill. Skill: cve Source: https://github.com/mdmagnuson-creator/yo-go/tree/main/skills/cve Command: npx skills add https://github.com/mdmagnuson-creator/yo-go --skill cve
This skill helps security and development teams quickly determine if a CVE affects their systems and what remediation options exist, reducing guesswork during incident response.
Run a CVE triage on the target repository to produce a remediation plan.
High-intent search queries and answers about installing and using this skill.
CVE triage scans dependency manifests, lockfiles, containers, and IaC to map CVEs to affected components and assess exposure. It evaluates direct vs transitive dependencies and production vs dev paths to determine actual risk.
CVE remediation prioritization applies to single, multiple, or organization-wide scopes by evaluating exposure contexts and exploitation potential. It proposes concrete next steps including version upgrades, mitigations, and rollout considerations.
CVE risk assessment collects authoritative advisory details from sources like NVD, MITRE, GitHub Advisory Database, and vendor or runtime advisories to guide software supply chain decisions.
Lockfiles and container images are scanned alongside dependency manifests and IaC manifests to identify vulnerability exposure. This codebase scanning maps CVEs to affected components for accurate remediation planning.
CVE triage supports organization-wide scopes to guide risk decisions for software supply chains. It maps CVEs across all repositories to assess exposure and drive remediation with concrete version upgrades and mitigations.
Remediation options include concrete next steps such as version upgrades, mitigations, and rollout considerations. These are determined by evaluating direct vs transitive dependencies and potential exploitation contexts.
kagentiScan project dependencies and source code for CVEs using Trivy.
mattobeeIdentify accessibility risks in proposed features, designs, or technical plans.
yocxy2Automate security audits and threat modeling for software repositories.
kinnerkarmanishDetect vulnerabilities and misconfigurations across codebases using static analysis, dependency checks, and secret detection.
