skills.rest
woohyun212
woohyun212COMMUNITY
Explore all skills by this author →
WebsiteGitHub

cve-lookup

Retrieve CVE details from the NVD API with curl and jq.

21|1|Updated Apr 12, 2026
Search Tags:#security#vulnerability#cvss#cve#lookup#nvd
One-click install
npx skills add https://github.com/woohyun212/security-skill --skill cve-lookup-woohyun212
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cve-lookup
Source: https://github.com/woohyun212/security-skill/tree/main/cve-lookup
Command: npx skills add https://github.com/woohyun212/security-skill --skill cve-lookup-woohyun212

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides instant, authoritative CVE information including severity scores, vectors, affected products, and reference links, eliminating manual lookup and parsing of NVD data.

Core Features & Use Cases

  • Retrieves CVE details from the NVD API v2 with optional API key handling.
  • Parses and presents CVSS v3/v2 scores, severity, CWE, affected products, and reference URLs.
  • Generates a formatted report saved to a specified directory for further analysis or reporting.

Quick Start

Ask the skill to look up CVE-2024-1234 and save the report to the output folder.

Frequently Asked Questions about cve-lookup

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I retrieve CVE details and CVSS scores from the NVD API?▼

To retrieve CVE details and CVSS scores from the NVD API, provide a valid CVE identifier to query severity vectors, affected products, and reference links. The process requires curl and jq to fetch and parse the JSON response.

What information is included in a generated vulnerability assessment report for a specific CVE?▼

A vulnerability assessment report for a specific CVE includes CVSS v3 and v2 severity scores, CWE classifications, affected products, and reference URLs. This formatted output is saved to a specified directory for patch prioritization analysis.

Do I need an NVD API key to look up CVE information?▼

You do not need an NVD API key to look up CVE information, but providing one optionally increases API rate limits. Basic vulnerability lookups using curl and jq function normally without authentication.

Can I automate patch prioritization using NVD vulnerability data?▼

You can automate patch prioritization by retrieving NVD vulnerability data containing CVSS severity scores and affected products. Parsing this JSON output allows teams to rank and address critical security flaws efficiently.

What are the limitations of querying the NVD API v2 for CVE details without an API key?▼

Querying the NVD API v2 for CVE details without an API key imposes standard rate limits that may throttle bulk vulnerability lookups. Providing an API key mitigates this constraint, ensuring smoother automated report generation.

Related Skills

Explore More Software Engineering Skills→
superfhpsuperfhp

siyuan

Interact with the SiYuan Notebase API using curl commands.

Community
Intermediate
adaptive-enforcement-labadaptive-enforcement-lab
3

risk-prioritization-framework-for-engineers

Prioritize vulnerability remediation using CVSS scores and decision trees.

Official
Advanced
matteocervellimatteocervelli
25

vulnerability-assessor

Assess software vulnerabilities with CVSS scoring and remediation planning.

Community
Advanced
RHEcosystemAppEngRHEcosystemAppEng
48

cve-recon

Query and aggregate CVE data from MITRE, OSV.dev, and Go vulnerability database.

Official
Intermediate