skills.rest
jassics
jassicsCOMMUNITY
Explore all skills by this author →
Website𝕏@jassicsGitHub

cvss

Compute CVSS v3.1 base scores from metric vectors with severity ratings.

6|Updated May 30, 2026
Search Tags:#vulnerability assessment#metrics#cybersecurity#cvss#security scoring
One-click install
npx skills add https://github.com/jassics/awesome-claude-security --skill cvss
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cvss
Source: https://github.com/jassics/awesome-claude-security/tree/main/plugins/security-reporting/skills/cvss
Command: npx skills add https://github.com/jassics/awesome-claude-security --skill cvss

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a methodical approach to scoring vulnerabilities using the CVSS v3.1 metric vector, offering a defensible severity rating for accurate assessment.

Core Features & Use Cases

  • CVSS v3.1 Scoring: Derive the base metric vector and compute the score, severity rating, and rationale for each metric.
  • Defensible Assessment: Use the Skill to ensure that the severity of a vulnerability is based on a thorough and justifiable analysis.
  • Use Case: For a cybersecurity professional needing to evaluate the severity of a potential vulnerability in a system, the Skill can be used to compute the CVSS v3.1 score and provide a detailed explanation of the metrics used.

Quick Start

To score a vulnerability, use the 'cvss' skill with the required metric inputs: /cvss:score AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Frequently Asked Questions about cvss

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I calculate a CVSS v3.1 base score from a metric vector?▼

You can calculate a CVSS v3.1 base score by providing the manual metric vector string, such as AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. The skill computes the numerical score and returns a severity rating with a detailed explanation of each metric.

What is a CVSS metric vector and how does it determine vulnerability severity?▼

A CVSS metric vector is a standardized text string representing exploitability and impact characteristics of a vulnerability. It determines severity by mapping these characteristics to a defensible numerical score and rating for accurate cybersecurity assessment.

Can I use this to generate a defensible vulnerability severity rating for assessments?▼

Yes, you can generate a defensible vulnerability severity rating by inputting the defined CVSS v3.1 metric vector. The skill computes the base score and explains the rationale for each metric to justify your analysis.

Does CVSS v3.1 scoring require manual input of all metrics?▼

Yes, CVSS v3.1 scoring requires manual input of the complete metric vector to compute the base score accurately. You must provide the specific exploitability and impact metrics to receive the severity rating and explanation.

Why does my vulnerability assessment need a detailed explanation of CVSS metrics?▼

A detailed explanation of CVSS metrics provides a defensible analysis for your vulnerability assessment. It ensures the severity rating is based on a thorough, justifiable evaluation of each metric rather than an arbitrary score.

Related Skills

Explore More Software Engineering Skills→
GeneralReasoningGeneralReasoning
4

cvss-score-extraction

Extract CVSS v3/v3.1 scores from NVD, GHSA, and RedHat with v2 fallback.

Official
Advanced
randalmurphalrandalmurphal

Vulnerability Triage & Prioritization

Compute CVSS scores and prioritize vulnerabilities with weighted ranking.

Community
Basic
Fantasia1999Fantasia1999

senior-security

Perform STRIDE threat modeling and vulnerability analysis for security reviews.

Community
Advanced
DCx7C5DCx7C5

vulnerabilities-SKILL.md

Prioritize CVEs by CVSS scores enriched with EPSS and KEV data.

Community
Advanced