cvss-scorer

Name: cvss-scorer
Availability: InStock
Author: Rifteo

Compute CVSS v3.1 scores and vectors from vulnerability descriptions.

30|6|Updated May 13, 2026

Search Tags:#security #vulnerability #scoring #cvss #pentest

Ready to run

npx skills add https://github.com/Rifteo/skills --skill cvss-scorer-rifteo

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: cvss-scorer
Source: https://github.com/Rifteo/skills/tree/main/cvss-scorer
Command: npx skills add https://github.com/Rifteo/skills --skill cvss-scorer-rifteo

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill provides a quick and accurate way to calculate CVSS v3.1 scores and vectors for vulnerability findings, eliminating the need for manual scoring and improving consistency.

Core Features & Use Cases

CVSS v3.1 Scoring: Automatically generate scores and vectors for various types of vulnerabilities.
Contextual Inference: Infers metrics from the vulnerability description and asks for clarification only when necessary.
Use Case: When a pentester needs to quickly determine the severity of a vulnerability in a bug bounty report or pentest finding.

Quick Start

Use the cvss-scorer skill to calculate the CVSS score for a vulnerability: "What's the CVSS score for this vulnerability?"

Frequently Asked Questions about cvss-scorer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I calculate a CVSS v3.1 score for a vulnerability finding?▼

You calculate a CVSS v3.1 score by providing the vulnerability description. The skill infers the necessary metrics from your context and generates the final score and vector automatically.

Can I generate a CVSS vector from a vulnerability description?▼

Yes, you can generate a CVSS vector directly from a vulnerability description. The skill interprets the provided context to determine the correct severity metrics and outputs the complete vector string.

Does the CVSS scorer ask for clarification on missing vulnerability context?▼

Yes, the CVSS scorer asks for clarification when necessary. If the vulnerability description lacks sufficient context to determine specific severity metrics, it will prompt you for the missing details.

What is the best way to score vulnerabilities for a bug bounty report?▼

The best way to score vulnerabilities for a bug bounty report is to automate the calculation for consistency. This skill eliminates manual scoring errors by computing accurate CVSS v3.1 vectors from your findings.

When do I need to compute a CVSS score during a penetration test?▼

You need to compute a CVSS score during penetration testing when evaluating the severity of identified vulnerabilities. This standardizes the risk assessment for your final security audit and reporting.

Do I need manual CVSS scoring tables to determine vulnerability severity?▼

No, you do not need manual CVSS scoring tables to determine vulnerability severity. The skill automatically computes the v3.1 metrics and generates the vector, improving consistency and saving time.