skills.rest
Aradotso
AradotsoOFFICIAL
Explore all skills by this author β†’
Website𝕏@aradotsoGitHub

cve-mcp-server-security-intelligence

Assess CVE exploitation and remediation priority using NVD, KEV, EPSS, and ATT&CK data.

7|2|Updated May 16, 2026
Search Tags:#risk scoring#cve#mitre att&ck#threat analysis#security intelligence#exploit lookup#ip reputation
One-click install
npx skills add https://github.com/Aradotso/mcp-skills --skill cve-mcp-server-security-intelligence
Or copy as Structured Prompt for Agentβ–Ό
Please help me install this Agent Skill.
Skill: cve-mcp-server-security-intelligence
Source: https://github.com/Aradotso/mcp-skills/tree/main/skills/cve-mcp-server-security-intelligence
Command: npx skills add https://github.com/Aradotso/mcp-skills --skill cve-mcp-server-security-intelligence

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It eliminates time-consuming manual CVE triage by automatically aggregating vulnerability details, exploitation likelihood, known-exploitation status, and threat intelligence into a single analysis flow.

Core Features & Use Cases

  • CVE intelligence from authoritative sources: Look up CVE records from NVD (including CVSS data, affected products, references, and CWE identifiers).
  • Exploitation and known-threat context: Check CISA KEV status, retrieve EPSS scores, search for public exploits/PoCs, and map findings to MITRE ATT&CK techniques.
  • Risk scoring, prioritization, and executive reporting: Compute a composite 0–100 risk score, rank CVEs for patching priority, and generate executive-ready security reports.
  • Network and threat intel enrichment: Investigate IP reputation/noise and analyze domains/URLs/hashes with services like VirusTotal, plus malware/IOC lookup via ThreatFox/MalwareBazaar-style sources.

Quick Start

Use the cve-mcp-server-security-intelligence skill to calculate and explain the exploitation and patch priority for a specific CVE ID like CVE-2024-3400.

Frequently Asked Questions about cve-mcp-server-security-intelligence

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prioritize CVEs for patching using EPSS and CISA KEV data?β–Ό

You can prioritize CVEs by aggregating CISA KEV status and EPSS scores to compute a composite 0–100 risk score, ranking vulnerabilities for patching priority based on exploitation likelihood and known-exploitation indicators.

What is the best way to automate CVE triage and map vulnerabilities to MITRE ATT&CK techniques?β–Ό

Automating CVE triage involves aggregating NVD vulnerability details, searching for public exploits and PoCs, and mapping findings to MITRE ATT&CK techniques to generate executive-ready security reports without manual cross-referencing.

Do I need API keys for VirusTotal and ThreatFox to investigate IP reputation and IOCs?β–Ό

API keys for services like VirusTotal and ThreatFox are optional for investigating IP reputation and IOCs; the analysis flow supports graceful degradation, continuing to function with available data when keys are missing.

Can I use this security intelligence workflow with any MCP-compatible client?β–Ό

Yes, this security intelligence workflow requires an MCP-compatible client with stdio transport, outbound HTTPS API access, and supports graceful degradation when optional API keys are missing.

How does CVE risk scoring combine NVD intelligence with exploit availability?β–Ό

CVE risk scoring combines NVD intelligence, including CVSS data and affected products, with exploitation likelihood and known-exploitation indicators to calculate a composite 0–100 risk score for remediation priority.

What limitations exist when analyzing domains and hashes without API keys?β–Ό

When optional API keys are missing, the tool gracefully degrades by skipping enriched threat intelligence from services like VirusTotal, limiting domain, URL, and hash analysis to publicly accessible baseline data.

Related Skills

Explore More Legal & Compliance Skills→
AgentPMTAgentPMT

install-agentpmt-mcp

Install and configure the AgentPMT MCP server for AI clients.

Official
Intermediate
jaskaranhundaljaskaranhundal
3

security-posture-score

Aggregate security findings across domains into a 0-100 executive scorecard.

Community
Advanced
infantesromeroadrianinfantesromeroadrian

transilience-cve-risk-score

Extract CVE risk scores from NVD using regex and API calls.

Community
Intermediate
DCx7C5DCx7C5

vulnerabilities-SKILL.md

Prioritize CVEs by CVSS scores enriched with EPSS and KEV data.

Community
Advanced