skills.rest
0x53c7
0x53c7OFFICIAL
Explore all skills by this author →
GitHub

cvss-scorer

Compute CVSSv4.0 vector strings, scores, and FIRST.org calculator URLs.

1|Updated Mar 6, 2026
Search Tags:#security#vulnerability#scoring#vector#calculator#cvss
One-click install
npx skills add https://github.com/0x53c7/security-testing-rovodev-skills --skill cvss-scorer
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cvss-scorer
Source: https://github.com/0x53c7/security-testing-rovodev-skills/tree/main/.rovodev/skills/cvss-scorer
Command: npx skills add https://github.com/0x53c7/security-testing-rovodev-skills --skill cvss-scorer

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Compute a CVSSv4.0 vector string, numeric score, and FIRST.org calculator URL for a security finding. Use when you need consistent, verifiable CVSS scoring — the calculator URL lets reviewers confirm the score matches the vector. Designed to be invoked by other skills (e.g., generate-test-leads) or directly.

Core Features & Use Cases

  • Generate a CVSSv4.0 vector from a finding's attributes and ensure internal consistency between vector and score.
  • Produce an exact numeric score and a FIRST.org calculator URL to validate the vector.
  • Designed for orchestration by other skills (e.g., generate-test-leads) or direct ad-hoc scoring.

Quick Start

Score a finding by providing its details to cvss-scorer and receive a vector, score, and calculator URL.

Frequently Asked Questions about cvss-scorer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I calculate a CVSSv4.0 score from a vulnerability vector string?▼

A CVSSv4.0 vector string is calculated by identifying the 11 base metrics for a security finding and assembling them into a valid vector. This skill computes the exact numeric score from that vector and derives the corresponding severity rating.

What is the CVSS vector format needed for generating a verifiable vulnerability score?▼

The CVSS vector format requires identifying the 11 CVSSv4.0 base metrics for a given security finding. Assembling these metrics into a valid vector string ensures internal consistency between the vector and the computed numeric score.

Can I validate my CVSSv4.0 vulnerability score against the official calculator?▼

Yes, you can validate your CVSSv4.0 vulnerability score by generating a FIRST.org calculator URL. This URL lets reviewers confirm that the exact numeric score matches the assembled vector string.

How do I automate CVSS scoring for downstream security findings?▼

Automate CVSS scoring by providing security finding details directly to this skill, which returns a structured format containing the vector, exact score, and calculator URL suitable for downstream consumption by other skills.

Does the CVSS scorer support direct ad-hoc scoring or does it require orchestration?▼

The CVSS scorer supports both direct ad-hoc scoring and orchestration by other skills. It is designed to be invoked directly or by downstream skills like generate-test-leads to deliver verifiable scores.

Related Skills

Explore More Software Engineering Skills→
Endor-Solutions-ArchitectureEndor-Solutions-Architecture
2

endor-explain

Explain CVEs and findings with severity, impact, attack vectors, and remediation steps.

Official
Advanced
marvinbissmarvinbiss

supabase-report-compare

Compare two Markdown security audit reports to track remediation progress and identify new vulnerabilities.

Community
Intermediate
thepradipthepradip

lead-hand-skill

Automate lead discovery, enrichment, deduplication, scoring, and reporting with CSV, JSON, or Markdown Table exports.

Community
Advanced
jassicsjassics
6

cvss

Compute CVSS v3.1 base scores from metric vectors with severity ratings.

Community
Intermediate