cvss-scorer

Name: cvss-scorer
Availability: InStock
Author: 0x53c7

Compute CVSSv4.0 vector strings, scores, and FIRST.org calculator URLs.

1|Updated Mar 6, 2026

Search Tags:#security #vulnerability #scoring #vector #calculator #cvss

Ready to run

npx skills add https://github.com/0x53c7/security-testing-rovodev-skills --skill cvss-scorer

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: cvss-scorer
Source: https://github.com/0x53c7/security-testing-rovodev-skills/tree/main/.rovodev/skills/cvss-scorer
Command: npx skills add https://github.com/0x53c7/security-testing-rovodev-skills --skill cvss-scorer

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Compute a CVSSv4.0 vector string, numeric score, and FIRST.org calculator URL for a security finding. Use when you need consistent, verifiable CVSS scoring — the calculator URL lets reviewers confirm the score matches the vector. Designed to be invoked by other skills (e.g., generate-test-leads) or directly.

Core Features & Use Cases

Generate a CVSSv4.0 vector from a finding's attributes and ensure internal consistency between vector and score.
Produce an exact numeric score and a FIRST.org calculator URL to validate the vector.
Designed for orchestration by other skills (e.g., generate-test-leads) or direct ad-hoc scoring.

Quick Start

Score a finding by providing its details to cvss-scorer and receive a vector, score, and calculator URL.

Frequently Asked Questions about cvss-scorer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I calculate a CVSSv4.0 score from a vulnerability vector string?▼

A CVSSv4.0 vector string is calculated by identifying the 11 base metrics for a security finding and assembling them into a valid vector. This skill computes the exact numeric score from that vector and derives the corresponding severity rating.

What is the CVSS vector format needed for generating a verifiable vulnerability score?▼

The CVSS vector format requires identifying the 11 CVSSv4.0 base metrics for a given security finding. Assembling these metrics into a valid vector string ensures internal consistency between the vector and the computed numeric score.

Can I validate my CVSSv4.0 vulnerability score against the official calculator?▼

Yes, you can validate your CVSSv4.0 vulnerability score by generating a FIRST.org calculator URL. This URL lets reviewers confirm that the exact numeric score matches the assembled vector string.

How do I automate CVSS scoring for downstream security findings?▼

Automate CVSS scoring by providing security finding details directly to this skill, which returns a structured format containing the vector, exact score, and calculator URL suitable for downstream consumption by other skills.

Does the CVSS scorer support direct ad-hoc scoring or does it require orchestration?▼

The CVSS scorer supports both direct ad-hoc scoring and orchestration by other skills. It is designed to be invoked directly or by downstream skills like generate-test-leads to deliver verifiable scores.