playbook-generator

Generate Ansible remediation playbooks for CVE vulnerabilities using Red Hat Lightspeed templates.

48|31|Updated Feb 2, 2026
One-click install
npx skills add https://github.com/RHEcosystemAppEng/agentic-collections --skill playbook-generator
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: playbook-generator
Source: https://github.com/RHEcosystemAppEng/agentic-collections/tree/main/rh-sre/skills/playbook-generator
Command: npx skills add https://github.com/RHEcosystemAppEng/agentic-collections --skill playbook-generator

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Remediation teams often spend substantial time crafting CVE remediation playbooks, risking inconsistency and human error. This skill automates the generation of production-ready Ansible remediation playbooks that follow Red Hat Lightspeed patterns and include RHEL-specific considerations.

Core Features & Use Cases

  • End-to-end playbook generation: Creates base remediation playbooks from CVE data, applying standard templates and best practices.
  • Documentation-driven enhancement: Consults cve-remediation-templates.md and package-management.md to embed proven remediation patterns.
  • Kubernetes-safe remediation: Includes pod eviction and node behavior considerations for Kubernetes deployments.
  • Pre-flight checks, backups, and auditing: Adds OS validation, subscription checks, backups/snapshots, and logging for traceability.
  • Batch remediation support: Generates playbooks for multiple CVEs and multiple target systems.

Quick Start

Provide CVE IDs and system IDs to generate a production-ready remediation playbook.

Frequently Asked Questions about playbook-generator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate Ansible remediation playbooks for CVE vulnerabilities?

To generate Ansible remediation playbooks for CVE vulnerabilities, provide CVE IDs and system IDs to automate production-ready creation using Red Hat Lightspeed templates. The skill consults cve-remediation-templates and package-management documentation to embed proven patterns.

Can I use this to create batch remediation playbooks for multiple CVEs?

Yes, you can create batch remediation playbooks for multiple CVEs and multiple target systems. It generates playbooks across Red Hat Enterprise Linux environments and Kubernetes deployments, ensuring compatibility with RHEL 7, 8, and 9.

Does the generated Ansible playbook include pre-flight checks and backups for Kubernetes?

Yes, the generated Ansible playbook includes pre-flight checks, backups, and auditing. For Kubernetes deployments, it incorporates pod eviction and node behavior considerations, alongside OS validation and subscription checks for traceability.

What is the best way to automate CVE remediation across RHEL environments?

The best way to automate CVE remediation across RHEL environments is using documentation-driven playbook generation that applies standard templates and best practices. This approach ensures consistency, reduces human error, and embeds RHEL-specific package management considerations.

How does the MCP toolchain integrate with vulnerability playbook generation?

The MCP toolchain integrates with vulnerability playbook generation through the create_vulnerability_playbook component. This toolchain integration allows the skill to consult cve-remediation-templates and package-management documentation before generating the final output.