cve-poc-generator

Generate Python PoC scripts and reports for individual CVEs.

Updated Apr 23, 2026
One-click install
npx skills add https://github.com/YukiIto1999/ctf-sleuth --skill cve-poc-generator
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cve-poc-generator
Source: https://github.com/YukiIto1999/ctf-sleuth/tree/main/.claude/skills/cve-poc-generator
Command: npx skills add https://github.com/YukiIto1999/ctf-sleuth --skill cve-poc-generator

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

CVE PoC research, PoC script generation, and vulnerability reporting are automated to streamline vulnerability assessment workflows.

Core Features & Use Cases

  • Automated CVE research: lookup CVEs in NVD, extract metrics and references.
  • PoC generation: create standalone Python PoC scripts that demonstrate the vulnerability safely.
  • Report generation: produce a human-readable vulnerability report with metadata and remediation guidance.
  • Use Case: Security researchers can quickly move from CVE ID to a test-ready PoC and a structured report.

Quick Start

Provide a CVE ID to automatically fetch data, generate a PoC, and compile a report.

Frequently Asked Questions about cve-poc-generator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a Python PoC script for a specific CVE?

To generate a Python PoC script, provide a CVE ID to automate NVD lookups, vendor advisories research, and PoC creation. The tool outputs a standalone Python script using standard libraries with strict safety constraints and clear source attribution.

What is included in an automated vulnerability report for a CVE?

An automated vulnerability report includes NVD metrics, vendor advisories, metadata, and remediation guidance. The tool compiles this data into a comprehensive human-readable markdown report and a machine-readable format for the specified CVE.

Can I use this to create PoC scripts without installing external Python dependencies?

Yes, you can create PoC scripts without installing external dependencies. The tool generates standalone Python scripts that rely solely on standard libraries, ensuring the proof of concept runs without requiring additional package installations or complex environment setups.

Does the generated PoC script adhere to safe security research constraints?

Yes, the generated PoC script adheres to strict safety constraints. It follows established PoC standards to ensure the proof of concept demonstrates the vulnerability safely without causing unintended harm or active exploitation during security research.

How do I fetch NVD metrics and references for a CVE ID?

Fetch NVD metrics and references by supplying the CVE ID to the automated research tool. It extracts the necessary vulnerability metrics and reference links directly from the NVD database and vendor advisories to compile into the final vulnerability report.

What's the best way to automate vulnerability assessment workflows from a CVE ID?

The best way to automate vulnerability assessment workflows is providing a CVE ID to this tool. It streamlines the process by automating NVD lookups, vendor advisories research, safe PoC script creation, and comprehensive markdown reporting into a single end-to-end workflow.