cve

What problem does it solve?

This skill helps security and development teams quickly determine if a CVE affects their systems and what remediation options exist, reducing guesswork during incident response.

Core Features & Use Cases

• Collect authoritative advisory details from sources like NVD, MITRE, GitHub Advisory Database, and vendor/runtime advisories.
• Map CVEs to affected components in codebases by scanning dependency manifests (e.g., package.json, go.mod, pyproject.toml), lockfiles, container images, and IaC manifests.
• Assess exposure and prioritize remediation by evaluating direct vs transitive dependencies, production vs dev paths, and potential exploitation contexts.
• Propose remediation options with concrete next steps, including version upgrades, mitigations, and rollout considerations.

Quick Start

Run a CVE triage on the target repository to produce a remediation plan.