Generate CVE request packages from pentest findings files.
npx skills add https://github.com/0x0pointer/skills --skill request-cves
Please help me install this Agent Skill. Skill: request-cves Source: https://github.com/0x0pointer/skills/tree/main/request-cves Command: npx skills add https://github.com/0x0pointer/skills --skill request-cves
Creating CVE request documentation manually is time‑consuming and error‑prone, especially after a pentest when multiple findings must be packaged for MITRE, GitHub, and vendors.
cve-candidates.json or findings.json and filters CVE‑worthy vulnerabilities.cve-candidates.json summary to track progress.Run the request‑cves skill with your email after a pentest to create full CVE request packages.
High-intent search queries and answers about installing and using this skill.
To generate CVE requests from pentest findings, provide a findings file like cve-candidates.json along with your researcher email. The skill filters CVE-worthy vulnerabilities and outputs structured MITRE form data, GitHub advisory drafts, and vendor notification emails.
You need a cve-candidates.json or findings.json file containing your vulnerability data, plus your researcher email. These inputs enable the skill to filter CVE-worthy items and produce MITRE, GitHub, and vendor documentation packages.
The skill parses your findings file, filters CVE-worthy vulnerabilities, and formats the data into MITRE form fields, GitHub advisory drafts, full disclosure reports, and vendor notification emails for each candidate vulnerability.
Yes, this skill is built for post-engagement reporting where multiple CVE-worthy vulnerabilities require structured documentation. It generates vendor notification emails and full disclosure reports to streamline the multi-vendor notification process.
A complete CVE request package includes MITRE form data, GitHub advisory drafts, full disclosure reports, and vendor notification emails for each candidate. It also provides a structured cve-candidates.json summary to track your submission progress.
RHEcosystemAppEngQuery and aggregate CVE data from MITRE, OSV.dev, and Go vulnerability database.
brucesongsCollect unstructured web data from CVE databases and threat feeds into structured JSON/CSV records.
Nir-BhayTrack CVEs with NVD data and CVSS scoring for patch prioritization.
zebbernGenerate CVE-format security advisories compliant with CNA rules.