skills.rest
Atrium-Hermes
Atrium-HermesCOMMUNITY
Explore all skills by this author →
𝕏@atriumhermesGitHub

Security Digest

Aggregate KEV, GitHub advisories, and EPSS data into prioritized patch guidance.

Updated Jun 2, 2026
Search Tags:#security#vulnerability#cvss#patch-management#kev#epss#github-advisories
One-click install
npx skills add https://github.com/Atrium-Hermes/atrium-lighthouse --skill security-digest-atrium-hermes
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Security Digest
Source: https://github.com/Atrium-Hermes/atrium-lighthouse/tree/main/skills/security-digest
Command: npx skills add https://github.com/Atrium-Hermes/atrium-lighthouse --skill security-digest-atrium-hermes

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Vulnerability information is scattered across feeds and advisories. This skill consolidates KEV data, EPSS scores, and GitHub advisories, and ranks items to help teams prioritize patches.

Core Features & Use Cases

  • Automated threat prioritization: loads KEV, GH advisories, and EPSS to surface what matters most.
  • Ecosystem filtering: respects a tracked stack (npm, pip, Go, etc.) to avoid noise.
  • Actionable outputs: categorizes items into PATCH TODAY, PATCH THIS WEEK, and MONITOR with concrete remediation steps.
  • Audit-ready logging: logs decisions to memory for traceability and future improvements.

Quick Start

Run the security-digest to generate a prioritized patch plan from KEV, GH advisories, and EPSS data.

Frequently Asked Questions about Security Digest

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prioritize vulnerability patches using KEV and EPSS data?▼

You can prioritize vulnerability patches by consolidating KEV, EPSS, and GitHub advisories to rank items. This approach categorizes vulnerabilities into PATCH TODAY, PATCH THIS WEEK, and MONITOR tiers for actionable remediation.

Can I filter GitHub advisories for specific ecosystems like npm, pip, and Go?▼

Yes, you can filter GitHub advisories for specific ecosystems. The skill respects a tracked software stack across npm, pip, Go, crates.io, and GitHub Actions to eliminate noise from irrelevant vulnerabilities.

What is the best way to automate a daily vulnerability digest for patch management?▼

Automating a daily vulnerability digest involves aggregating EPSS, KEV, and GitHub advisory feeds. The skill processes these inputs, filters by your stack, and logs decisions to memory for audit-ready traceability.

Does this vulnerability aggregation tool work with GitHub Actions and crates.io ecosystems?▼

Yes, this vulnerability aggregation tool works with GitHub Actions and crates.io ecosystems. It supports daily or weekly digest generation across multiple environments to surface actionable patching guidance.

How do I generate an audit-ready vulnerability summary with concrete remediation steps?▼

You generate an audit-ready vulnerability summary by consolidating threat feeds and logging decisions to memory. The output categorizes items into actionable tiers with concrete remediation steps for your team.

Related Skills

Explore More Software Engineering Skills→
cosmixcosmix
53

dependency-scan

Scan project dependencies for vulnerabilities, outdated packages, and license issues.

Community
Advanced
riparinoriparino
1

defensive-vulnerability-management

Automates vulnerability prioritization and remediation using KQL enrichment and patch verification.

Community
Advanced
arbazkhan971arbazkhan971
26

devsecops

Integrate security scanning into CI/CD pipelines with blocking gates.

Community
Advanced
anajuliabitanajuliabit
6

Security Digest

Rank software vulnerabilities by CISA KEV, EPSS, and CVSS context.

Community
Advanced