Identify and summarize exploit intelligence for repository dependencies.
npx skills add https://github.com/Vulnetix/pix-ai-coding-assistant --skill exploits
Please help me install this Agent Skill. Skill: exploits Source: https://github.com/Vulnetix/pix-ai-coding-assistant/tree/main/vulnetix/skills/exploits Command: npx skills add https://github.com/Vulnetix/pix-ai-coding-assistant --skill exploits
Analyzes and consolidates exploit intelligence to inform vulnerability analysis and remediation planning for repositories and their dependencies.
Run the exploit analysis workflow on a selected vuln id to fetch data, assess impact, and update the vulnerability memory.
High-intent search queries and answers about installing and using this skill.
You analyze exploit intelligence by collecting CVEs, GHSA IDs, EPSS, and CISA KEV data across direct and transitive dependencies, then generating a threat report with CWSS scoring and MITRE ATT&CK mappings to guide remediation.
CWSS scoring quantifies vulnerability severity and risk context to guide remediation planning. It evaluates exploit intelligence and threat model data to help prioritize fixes across your repository dependencies.
Yes, you can track vulnerability analysis history across sessions. The workflow maintains a central vulnerability memory entry to record decisions, history, and fixes for tracking findings over time.
Yes, the vulnerability analysis workflow supports CISA KEV and EPSS data. It collects these metrics alongside CVEs, GHSA IDs, PoC references, and advisories to consolidate exploit intelligence for your repository.
You generate a threat report by running the exploit analysis workflow on a selected vulnerability ID. It fetches CVEs, PoC references, advisories, and potential attack vectors, then produces a concise report with MITRE ATT&CK mappings.
The best way to prepare a remediation plan is to assess the exploit's impact using threat model data and CWSS scoring, identify mitigations and upgrade paths, and update the vulnerability memory entry to track the remediation decisions.
lis186Scan manifest files to inventory dependency versions and usage points.
qvidal01Apply tiered dependency vulnerability fixes with automated verification after each step.
windowh1Perform web searches, retrieve authoritative sources, and compile findings into a structured report.
jlawsRun STRIDE threat modeling and SAST vulnerability scans on codebases.
