Rank software vulnerabilities by CISA KEV, EPSS, and CVSS context.
npx skills add https://github.com/anajuliabit/aeon --skill security-digest-anajuliabit
Please help me install this Agent Skill. Skill: Security Digest Source: https://github.com/anajuliabit/aeon/tree/main/skills/security-digest Command: npx skills add https://github.com/anajuliabit/aeon --skill security-digest-anajuliabit
It prevents security teams from wasting time on scary but unlikely vulnerabilities by prioritizing what is being actively exploited or is likely to be exploited soon.
Tell your agent to run Security Digest and set var to the ecosystems you care about, for example npm,pip,Go,crates.io,GitHub Actions, so it outputs a ranked patch today/this week/monitor list.
High-intent search queries and answers about installing and using this skill.
Vulnerability prioritization using CISA KEV and EPSS ranks actively exploited issues first, applies EPSS for 30-day exploitation likelihood, and retains CVSS context to tier patches into immediate, weekly, or monitor actions.
Automated patch management alerts for npm, pip, Go, Rust, and GitHub Actions fetch GitHub Advisories from the last 48 hours, filter by tracked ecosystems, compute EPSS per CVE, and output scheduled patch tier notifications.
CVSS severity measures theoretical impact, while EPSS probability predicts exploitation likelihood, making EPSS combined with CISA KEV confirmation a more reliable indicator for prioritizing active patching over theoretical severity.
Yes, tracked ecosystem filters retain a KEV override that always keeps CISA Known Exploited Vulnerabilities in your digest even if they fall outside your specified npm, pip, or Go stack configurations.
Deduplicating GitHub Advisory alerts requires logging previous Security Digest results, fetching new advisories from the last 48 hours, and filtering out CVEs that already exist in your recent notification logs.
Patching CISA KEV vulnerabilities today addresses confirmed in-the-wild exploitation, whereas high CVSS scores indicate theoretical severity, making KEV and EPSS signals more urgent for immediate remediation than CVSS alone.
Atrium-HermesAggregate KEV, GitHub advisories, and EPSS data into prioritized patch guidance.
apacheAutomate CVE allocation and issue tracker updates with governance controls.
matteocervelliAssess software vulnerabilities with CVSS scoring and remediation planning.
DCx7C5Fetch EPSS scores for CVEs and rank vulnerabilities by exploitation probability.
