cveapi

Look up CVE details by ID with MITRE and NVD fallback.

779|139|Updated Mar 7, 2026
One-click install
npx skills add https://github.com/taracodlabs/aiden --skill cveapi
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cveapi
Source: https://github.com/taracodlabs/aiden/tree/main/skills/cveapi
Command: npx skills add https://github.com/taracodlabs/aiden --skill cveapi

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

CVE lookup and vulnerability visibility by ID, providing severity, CVSS, references, and affected products to accelerate triage and remediation decisions.

Core Features & Use Cases

  • MITRE-first CVE lookup with automatic NVD fallback for richer data.
  • Normalised output including severity, CVSS scores, references, and affected product details.
  • Use cases include incident response, compliance auditing, and vulnerability management workflows.

Quick Start

Look up a CVE by ID (e.g., CVE-2021-44228) to retrieve its severity, CVSS score, references, and affected product details.

Frequently Asked Questions about cveapi

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I look up a CVE by ID to get severity and CVSS scores?

To look up a CVE by ID, query the identifier to retrieve normalized severity, CVSS scores, references, and affected products, using MITRE first with automatic NVD fallback for richer data.

What CVE data is returned when MITRE does not have the vulnerability record?

When MITRE data is unavailable, the lookup automatically falls back to NVD to obtain the vulnerability's severity, CVSS scores, references, and affected product details.

Can I use CVE lookup for incident response and security auditing?

Yes, you can use CVE lookup for incident response, security auditing, and vulnerability management workflows to accelerate triage and remediation decisions using normalized vulnerability data.

Does the vulnerability lookup normalize data from MITRE and NVD into a consistent schema?

Yes, the vulnerability lookup normalizes data from MITRE and NVD into a consistent schema, ensuring uniform severity, CVSS, references, and affected product details across sources.

What happens if an invalid CVE ID format is used during vulnerability lookup?

The vulnerability lookup validates the CVE ID format before querying MITRE and NVD, preventing malformed identifiers from triggering unnecessary API requests and ensuring accurate data retrieval.