skills.rest
subimagesec
subimagesecOFFICIAL
Explore all skills by this author →
Website𝕏@subimagesecGitHub

investigate-cve

Summarize a CVE's severity, exploit status, affected resources, and remediation options.

Updated Apr 30, 2026
Search Tags:#remediation#cve#kev#epss#vulnerability-triage#attack-path-analysis#subimage
One-click install
npx skills add https://github.com/subimagesec/skills --skill investigate-cve
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: investigate-cve
Source: https://github.com/subimagesec/skills/tree/main/plugins/subimage-mcp/skills/investigate-cve
Command: npx skills add https://github.com/subimagesec/skills --skill investigate-cve

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It helps security operators quickly understand whether a specific CVE affects their environment, how severe it is, and what to do next.

Core Features & Use Cases

  • End-to-end CVE analysis: Pull severity, KEV status, EPSS, affected packages, and impacted resources for a named CVE.
  • Fixability guidance: Identify whether remediation is a package bump, image rebuild, or mitigation-only decision.
  • Attack-path handoff: After summarizing the CVE, it can offer a follow-up investigation into whether the exposed assets sit on a known attack path.

Quick Start

Ask the assistant to investigate a specific CVE in SubImage and summarize the impact, fixes, and whether to check attack paths next.

Frequently Asked Questions about investigate-cve

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I investigate a CVE to determine its severity and exploit status in my environment?▼

CVE investigation pulls severity, KEV status, EPSS, and affected packages for a named CVE, correlating them to your impacted resources to summarize environment-specific risk.

What is the best way to prioritize vulnerability triage and patching for affected assets?▼

Vulnerability triage prioritizes patches by assessing fixability guidance, determining whether remediation requires a package bump, an image rebuild, or mitigation-only actions.

How does attack path analysis work after assessing a CVE's impact on exposed assets?▼

After CVE assessment, attack path analysis evaluates whether your exposed assets sit on a known attack path, triggered as an explicit follow-up investigation once you approve the handoff.

Can I use this CVE analysis for vendor advisory review and SubImage tenant impact assessment?▼

CVE analysis applies to vendor advisory review and environment-specific impact assessment within SubImage tenants, retrieving CVE records and correlating packages to assets.

How do I identify remediation options and fixability guidance for a specific CVE?▼

Remediation options are identified by evaluating the CVE record to determine whether the appropriate fix is a package bump, an image rebuild, or a mitigation-only decision.

Related Skills

Explore More Software Engineering Skills→
matteocervellimatteocervelli
25

vulnerability-assessor

Assess software vulnerabilities with CVSS scoring and remediation planning.

Community
Advanced
AcczdyAcczdy
2

conducting-internal-network-penetration-test

Simulate internal network penetration tests to reveal lateral movement and privilege escalation paths.

Community
Advanced
zebbernzebbern
5

triage-findings

Deduplicate and prioritize vulnerability findings using CVSS, EPSS, and KEV context.

Community
Advanced
ortus-docsortus-docs
16

boxlang-runtime-digitalocean-app

Deploy BoxLang applications to DigitalOcean App Platform via GitHub.

Official
Advanced