skills.rest
Rifteo
RifteoOFFICIAL
Explore all skills by this author →
GitHub

cvss-scorer

Compute CVSS v3.1 scores and vectors from vulnerability descriptions.

30|6|Updated May 13, 2026
Search Tags:#security#vulnerability#scoring#cvss#pentest
One-click install
npx skills add https://github.com/Rifteo/skills --skill cvss-scorer-rifteo
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cvss-scorer
Source: https://github.com/Rifteo/skills/tree/main/cvss-scorer
Command: npx skills add https://github.com/Rifteo/skills --skill cvss-scorer-rifteo

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill provides a quick and accurate way to calculate CVSS v3.1 scores and vectors for vulnerability findings, eliminating the need for manual scoring and improving consistency.

Core Features & Use Cases

  • CVSS v3.1 Scoring: Automatically generate scores and vectors for various types of vulnerabilities.
  • Contextual Inference: Infers metrics from the vulnerability description and asks for clarification only when necessary.
  • Use Case: When a pentester needs to quickly determine the severity of a vulnerability in a bug bounty report or pentest finding.

Quick Start

Use the cvss-scorer skill to calculate the CVSS score for a vulnerability: "What's the CVSS score for this vulnerability?"

Frequently Asked Questions about cvss-scorer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I calculate a CVSS v3.1 score for a vulnerability finding?▼

You calculate a CVSS v3.1 score by providing the vulnerability description. The skill infers the necessary metrics from your context and generates the final score and vector automatically.

Can I generate a CVSS vector from a vulnerability description?▼

Yes, you can generate a CVSS vector directly from a vulnerability description. The skill interprets the provided context to determine the correct severity metrics and outputs the complete vector string.

Does the CVSS scorer ask for clarification on missing vulnerability context?▼

Yes, the CVSS scorer asks for clarification when necessary. If the vulnerability description lacks sufficient context to determine specific severity metrics, it will prompt you for the missing details.

What is the best way to score vulnerabilities for a bug bounty report?▼

The best way to score vulnerabilities for a bug bounty report is to automate the calculation for consistency. This skill eliminates manual scoring errors by computing accurate CVSS v3.1 vectors from your findings.

When do I need to compute a CVSS score during a penetration test?▼

You need to compute a CVSS score during penetration testing when evaluating the severity of identified vulnerabilities. This standardizes the risk assessment for your final security audit and reporting.

Do I need manual CVSS scoring tables to determine vulnerability severity?▼

No, you do not need manual CVSS scoring tables to determine vulnerability severity. The skill automatically computes the v3.1 metrics and generates the vector, improving consistency and saving time.

Related Skills

Explore More Software Engineering Skills→
jpoleyjpoley
50

security-analyst

Classify security findings with OWASP, CWE, and CVSS v3.1 scoring.

Community
Advanced
Kisilev13Kisilev13

report-writing

Generate bug bounty reports for HackerOne, Bugcrowd, Intigriti, and Immunefi.

Community
Advanced
jassicsjassics
6

cvss

Compute CVSS v3.1 base scores from metric vectors with severity ratings.

Community
Intermediate
GeneralReasoningGeneralReasoning
4

cvss-score-extraction

Extract CVSS v3/v3.1 scores from NVD, GHSA, and RedHat with v2 fallback.

Official
Advanced