skills.rest
fullykubed
fullykubedCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

CVE

Triage and resolve CVE vulnerabilities reported by vulnix in NixOS systems.

2|Updated Jul 26, 2025
Search Tags:#security#patch#triage#workflows#nixos#cve#vulnix
One-click install
npx skills add https://github.com/fullykubed/nixos-config --skill cve-fullykubed
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: CVE
Source: https://github.com/fullykubed/nixos-config/tree/main/.claude/skills/CVE
Command: npx skills add https://github.com/fullykubed/nixos-config --skill cve-fullykubed

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This CVE Skill helps security engineers and system admins identify, triage, and resolve CVE vulnerabilities found by vulnix in a NixOS system, providing a structured workflow to manage vulnerability lifecycles.

Core Features & Use Cases

  • IdentifyCVE: scan and triage vulnerabilities reported by vulnix and determine which are real threats versus false positives.
  • ResolveCVE: patch or whitelist a CVE when a real vulnerability is confirmed and a remediation path exists.
  • ReviewPatches: review existing CVE patches in the repository to verify applicability and status across nixpkgs.
  • Use Case: When vulnix reports CVEs, run the CVE lifecycle to decide patching, whitelisting, or patch removal as part of system hardening.

Quick Start

Invoke IdentifyCVE to scan for CVEs, then use ResolveCVE for a specific CVE patch, or choose ReviewPatches to verify current patches.

Frequently Asked Questions about CVE

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I triage CVE vulnerabilities reported by vulnix in NixOS?▼

To triage CVE vulnerabilities from vulnix in NixOS, use the IdentifyCVE workflow to scan reported vulnerabilities and determine which are real threats versus false positives, selecting the appropriate workflow to manage the vulnerability lifecycle.

What is the best way to patch or whitelist a confirmed CVE in NixOS?▼

The best way to patch or whitelist a confirmed CVE in NixOS is to run the ResolveCVE workflow. This applies when a real vulnerability is confirmed and a remediation path exists, executing steps to patch or whitelist the vulnerability.

How do I verify existing CVE patches and their status across nixpkgs?▼

To verify existing CVE patches across nixpkgs, use the ReviewPatches workflow. This reviews existing CVE patches in the repository to verify their applicability and current status across machine profiles.

Does this CVE triage process require vulnix scan results to start?▼

Yes, the CVE triage process applies when investigating vulnix scan results. The workflows read CVE details and check nixpkgs status based on the vulnerabilities reported by the vulnix scanner in your NixOS system.

When should I remove a CVE patch during NixOS system hardening?▼

You should remove a CVE patch during system hardening when ReviewPatches verifies it is no longer applicable or necessary across nixpkgs. The lifecycle workflow decides patching, whitelisting, or patch removal based on current applicability and status.

Related Skills

Explore More Software Engineering Skills→
jeremylongshorejeremylongshore
2.6k

scanning-database-security

Scan PostgreSQL and MySQL databases for security vulnerabilities and generate remediation reports.

Community
Advanced
khanelimankhaneliman
340

system-planning

Plan and implement NixOS system configurations for reproducible deployments.

Community
Advanced
Dimon94Dimon94
111

cc-devflow-orchestrator

Route user requests to the correct CC-DevFlow agents and commands.

Community
Basic
Liberty91LTDLiberty91LTD
15

vulnerability-intelligence

Ranks vulnerabilities using CVSS, EPSS, KEV, and weaponisation data.

Official
Advanced