cve-lookup

Retrieve CVE details from the NVD API with curl and jq.

21|1|Updated Apr 12, 2026

Search Tags:#security #vulnerability #cvss #cve #lookup #nvd

Ready to run

npx skills add https://github.com/woohyun212/security-skill --skill cve-lookup-woohyun212

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: cve-lookup
Source: https://github.com/woohyun212/security-skill/tree/main/cve-lookup
Command: npx skills add https://github.com/woohyun212/security-skill --skill cve-lookup-woohyun212

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides instant, authoritative CVE information including severity scores, vectors, affected products, and reference links, eliminating manual lookup and parsing of NVD data.

Core Features & Use Cases

Retrieves CVE details from the NVD API v2 with optional API key handling.
Parses and presents CVSS v3/v2 scores, severity, CWE, affected products, and reference URLs.
Generates a formatted report saved to a specified directory for further analysis or reporting.

Quick Start

Ask the skill to look up CVE-2024-1234 and save the report to the output folder.

Frequently Asked Questions about cve-lookup

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I retrieve CVE details and CVSS scores from the NVD API?▼

To retrieve CVE details and CVSS scores from the NVD API, provide a valid CVE identifier to query severity vectors, affected products, and reference links. The process requires curl and jq to fetch and parse the JSON response.

What information is included in a generated vulnerability assessment report for a specific CVE?▼

A vulnerability assessment report for a specific CVE includes CVSS v3 and v2 severity scores, CWE classifications, affected products, and reference URLs. This formatted output is saved to a specified directory for patch prioritization analysis.

Do I need an NVD API key to look up CVE information?▼

You do not need an NVD API key to look up CVE information, but providing one optionally increases API rate limits. Basic vulnerability lookups using curl and jq function normally without authentication.

Can I automate patch prioritization using NVD vulnerability data?▼

You can automate patch prioritization by retrieving NVD vulnerability data containing CVSS severity scores and affected products. Parsing this JSON output allows teams to rank and address critical security flaws efficiently.

What are the limitations of querying the NVD API v2 for CVE details without an API key?▼

Querying the NVD API v2 for CVE details without an API key imposes standard rate limits that may throttle bulk vulnerability lookups. Providing an API key mitigates this constraint, ensuring smoother automated report generation.