skills.rest
DCx7C5
DCx7C5COMMUNITY
Explore all skills by this author →
GitHub

endpoint-SKILL.md

Prioritize endpoint vulnerabilities using CVSS, EPSS, and CISA KEV signals.

Updated Apr 20, 2026
Search Tags:#vulnerability#remediation#endpoint#cvss#patching#kev#epss
One-click install
npx skills add https://github.com/DCx7C5/ai-marketplace --skill endpoint-skill-md
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: endpoint-SKILL.md
Source: https://github.com/DCx7C5/ai-marketplace/tree/main/skills/vulnerabilities/remediation/endpoint
Command: npx skills add https://github.com/DCx7C5/ai-marketplace --skill endpoint-skill-md

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

Endpoint vulnerability data often arrives scattered across scanners, assets, and advisories. This Skill consolidates CVSS, EPSS, and CISA KEV signals to help security teams prioritize remediation actions for endpoints and meet compliance timelines.

Core Features & Use Cases

  • Risk-based prioritization: combines CVSS, EPSS, and KEV data to assign P1-P4 priorities with SLAs.
  • Plan generation: outputs a remediation plan with per-host aggregation and deadlines.
  • Export options: generates JSON remediation plan and CSV for assignees.

Quick Start

Parse a Nessus CSV export and generate a remediation plan for endpoint vulnerability remediation.

Frequently Asked Questions about endpoint-SKILL.md

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prioritize endpoint vulnerability remediation using CVSS, EPSS, and CISA KEV data?▼

Endpoint vulnerability prioritization combines CVSS, EPSS, and CISA KEV signals to assign P1-P4 priorities with SLAs, generating a risk-based remediation plan for patch deployment scheduling across on-prem and cloud endpoints.

What is the best way to generate a remediation plan from a Nessus CSV export?▼

Generating a remediation plan from a Nessus CSV export involves parsing the scanner data, normalizing vulnerability inputs, and aggregating per-host findings to output prioritized remediation queues with SLA deadlines.

Can I use this approach for both on-prem and cloud endpoint vulnerability management?▼

Yes, this risk-based triage approach applies to vulnerability management workflows across both on-prem and cloud endpoints, consolidating scattered scanner, asset, and advisory data to meet compliance timelines.

How does combining EPSS and KEV signals improve patching prioritization over CVSS alone?▼

Combining EPSS and KEV signals with CVSS improves patching prioritization by integrating exploit probability and active exploitation evidence, enabling risk-based triage rather than relying solely on base severity scores.

What export formats are available for the generated vulnerability remediation plan?▼

The generated vulnerability remediation plan exports to JSON format for system integration and CSV format for assignees, providing per-host aggregation and SLA deadlines for patch deployment scheduling.

Do I need any external dependencies to normalize and enrich scanner data for SLA setting?▼

No external dependencies are required; the skill handles input normalization and enrichment internally, consolidating vulnerability signals to assign P1-P4 priorities and generate SLA deadlines directly.

Related Skills

Explore More Legal & Compliance Skills→
DCx7C5DCx7C5

vulnerabilities-SKILL.md

Prioritize CVEs by CVSS scores enriched with EPSS and KEV data.

Community
Advanced
matteocervellimatteocervelli
25

vulnerability-assessor

Assess software vulnerabilities with CVSS scoring and remediation planning.

Community
Advanced
DCx7C5DCx7C5

rapid7-SKILL.md

Automate Rapid7 InsightVM console setup, engine deployment, and site scans.

Community
Advanced
UnitOneAIUnitOneAI
44

patch-prioritization

Prioritize vulnerability remediation patches using SSVC 2.1, EPSS v3, and CISA KEV.

Official
Intermediate