skills.rest
RHEcosystemAppEng
RHEcosystemAppEngOFFICIAL
Explore all skills by this author →
GitHub

cve-recon

Query and aggregate CVE data from MITRE, OSV.dev, and Go vulnerability database.

48|31|Updated Feb 2, 2026
Search Tags:#CVE#vulnerability management#OSV.dev#security research#MITRE#Go vulnerability database
One-click install
npx skills add https://github.com/RHEcosystemAppEng/agentic-plugins --skill cve-recon
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cve-recon
Source: https://github.com/RHEcosystemAppEng/agentic-plugins/tree/main/ocp-admin/skills/cve-recon
Command: npx skills add https://github.com/RHEcosystemAppEng/agentic-plugins --skill cve-recon

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, json, and includes scripts (resource) components.

What problem does it solve?

This Skill automates the process of retrieving and generating a structured report about the affected packages, ecosystems, and vulnerable version ranges for a given CVE, thereby streamlining security research and incident response.

Core Features & Use Cases

  • CVE Querying: Automatically queries MITRE CVE API, OSV.dev, and the Go vulnerability database for detailed CVE information.
  • Structured Reporting: Outputs a detailed report with information on affected packages, versions, and CVSS scores in various formats like Markdown, JSON, and CSV.
  • Use Case: Quickly retrieve all the information needed for a specific CVE without manually checking multiple sources, including affected versions of software components, severity ratings, and references to further documentation.

Quick Start

Use the cve-recon skill to get information about CVE-2023-38039.

Frequently Asked Questions about cve-recon

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate CVE information retrieval for incident response?▼

Automated CVE report generation consolidates vulnerability data from MITRE, OSV.dev, and the Go vulnerability database into structured formats like Markdown, JSON, and CSV. It captures affected packages, vulnerable version ranges, and CVSS scores to streamline incident response.

Can I query the Go vulnerability database and OSV.dev for affected package versions at the same time?▼

Querying OSV.dev and the Go vulnerability database simultaneously is possible using automated Python scripts. This approach fetches and aggregates affected package and version data alongside MITRE CVE API details into a single structured report.

What is the best way to generate a structured vulnerability report for a specific CVE ID?▼

Generating a structured vulnerability report for a specific CVE ID is best achieved by aggregating data from MITRE, OSV.dev, and the Go vulnerability database. The output provides affected package details, version ranges, and CVSS scores in Markdown, JSON, or CSV formats.

Does this CVE querying approach require specific Python dependencies?▼

This CVE querying approach requires the Python requests and json dependencies to function. These libraries handle fetching and processing CVE data from external APIs like MITRE and OSV.dev for automated vulnerability management.

When do I need to automate vulnerability management with Python scripts instead of manual checks?▼

Automating vulnerability management with Python scripts is needed when handling multiple CVE IDs for security auditing or incident response. It replaces manual checks across MITRE and OSV.dev, efficiently aggregating data on affected packages, versions, and severity ratings.

Related Skills

RHEcosystemAppEngRHEcosystemAppEng
48

container-cve-validator

Validates CVEs against Red Hat container images using SBOM attestations and VEX data.

Official
Advanced
taracodlabstaracodlabs
779

cveapi

Look up CVE details by ID with MITRE and NVD fallback.

Official
Advanced
limit5limit5

SKILL_HD_CVE_IMPACT

Map CVE entries to affected components in a Software Bill of Materials.

Community
Intermediate
wangdongzuopinwangdongzuopin
8

sentinel-cve

Analyze CVEs and CVSS scores to determine vulnerability severity and remediation.

Community
Advanced