skills.rest
LeoWSY-hashblue
LeoWSY-hashblueCOMMUNITY
Explore all skills by this author →
GitHub

cve-risk-score

Fetch CVE risk scores from the National Vulnerability Database when CVE IDs are detected.

3|1|Updated May 26, 2026
Search Tags:#cvss#cve#lookup#nvd#cwe#risk-score#security-intel
One-click install
npx skills add https://github.com/LeoWSY-hashblue/-communitytools-custom --skill cve-risk-score-leowsy-hashblue
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cve-risk-score
Source: https://github.com/LeoWSY-hashblue/-communitytools-custom/tree/main/skills/cve-risk-score
Command: npx skills add https://github.com/LeoWSY-hashblue/-communitytools-custom --skill cve-risk-score-leowsy-hashblue

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Automatically fetch and display CVE risk scores from the National Vulnerability Database (NVD) whenever a CVE ID is detected in conversation, enabling rapid risk assessment and context-aware decision making.

Core Features & Use Cases

  • Automatic inline CVE risk scoring: fetches CVSS score, severity, CWE, and description for CVEs mentioned in research, scanning, or chat.
  • Batch lookups & enrichment: supports multiple CVEs in a single lookup and augments findings with authoritative risk data.
  • Practical use cases: prioritize remediation, triage vulnerabilities in reports, and augment security workflows with consistent risk context.

Quick Start

Trigger automatically when a CVE ID appears and test manually by running the NVD lookup script with one or more CVE IDs.

Frequently Asked Questions about cve-risk-score

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automatically fetch CVSS risk scores when a CVE ID appears in chat?▼

CVE risk scores are automatically fetched from the National Vulnerability Database (NVD) whenever a CVE ID matching the regex pattern is detected in conversation. It parses the ID and presents the CVSS score, severity, CWE, and description inline.

Can I look up multiple CVEs from the NVD at the same time?▼

Yes, batch lookups are supported for multiple CVEs in a single request. The tool fetches CVSS scores, severity ratings, and CWE classifications from NVD simultaneously to enrich your findings with authoritative risk data.

What CVE ID format is required to trigger automatic NVD lookups?▼

The tool detects CVE IDs using the regex pattern CVE-\d{4}-\d{4,}. Any text matching this standard format will automatically trigger an NVD lookup to fetch the associated risk score and vulnerability details.

How do I prioritize vulnerability remediation using CVSS scores from NVD?▼

You can prioritize remediation by using the fetched CVSS scores and severity ratings from NVD. The tool provides consistent risk context that helps triage vulnerabilities in reports and augment security workflows for decision making.

Does the NVD lookup tool handle API rate limits?▼

Yes, the NVD lookup script handles rate limits and utilizes API keys when available. This ensures reliable fetching of CVE risk scores and vulnerability descriptions without exceeding API request thresholds.

Why are my CVE risk scores not appearing inline during research?▼

Inline CVE risk scoring requires the text to contain a valid CVE ID matching the CVE-\d{4}-\d{4,} regex. If the ID format is incorrect or missing, the automatic NVD lookup will not trigger to fetch the risk data.

Related Skills

Explore More Data & Analytics Skills→
infantesromeroadrianinfantesromeroadrian

transilience-cve-risk-score

Extract CVE risk scores from NVD using regex and API calls.

Community
Intermediate
Blake-JohnBlake-John

security-reviewer

Identify security vulnerabilities and generate structured audit reports with severity ratings.

Community
Advanced
wangdongzuopinwangdongzuopin
8

sentinel-cve

Analyze CVEs and CVSS scores to determine vulnerability severity and remediation.

Community
Advanced
dgethingsdgethings

nvd-cve

Search the National Vulnerability Database for CVEs by keyword or ID.

Community
Advanced