cve-lookup

Search CVEs by ID or product name and present vulnerability details from OpenCVE.

3|Updated Jan 17, 2026
One-click install
npx skills add https://github.com/Mearman/marketplace --skill cve-lookup
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cve-lookup
Source: https://github.com/Mearman/marketplace/tree/main/plugins/cve-search/skills/cve-lookup
Command: npx skills add https://github.com/Mearman/marketplace --skill cve-lookup

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

CVE vulnerability lookup provides quick, structured vulnerability details for CVEs and affected products, enabling faster risk assessment and remediation planning.

Core Features & Use Cases

  • CVE ID lookup: Retrieve full vulnerability details for a specific CVE, including severity, CVSS scores, and references.
  • Product search: Find CVEs affecting a named product to understand risk exposure across software portfolios.
  • Rich output: View CVSS scores, affected software and versions, and references in a concise, readable format.

Quick Start

Run a CVE lookup by providing a CVE ID or a product name to fetch vulnerability details.

Frequently Asked Questions about cve-lookup

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find CVE vulnerability details using a CVE ID?

To find CVE vulnerability details, provide a valid CVE ID to retrieve full information including severity scores, affected software versions, and references in a structured format.

Can I search for CVEs by product name to assess software portfolio risk?

Yes, you can search for CVEs by product name to discover vulnerabilities affecting your software portfolio, retrieving severity scores and affected versions for risk assessment.

What information is included in CVE lookup results?

CVE lookup results include vulnerability severity scores, CVSS metrics, affected software versions, and references, all presented in a concise, human-readable format for easy review.

What data source is used for CVE lookups and does it require setup?

The Skill uses OpenCVE as its data source for vulnerability lookups and requires no additional dependencies, utilizing a built-in cache for straightforward query handling.

How does the tool handle invalid CVE ID formats?

The tool validates input formats for CVE IDs before querying OpenCVE, employing a straightforward error-handling strategy to prevent malformed requests and ensure accurate vulnerability retrieval.