Security Digest

Prioritize CVEs and advisories into ranked patch plans using KEV, EPSS, and CVSS signals.

Updated Jun 3, 2026
One-click install
npx skills add https://github.com/swarm-ai-research/aeon --skill security-digest-swarm-ai-research
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Security Digest
Source: https://github.com/swarm-ai-research/aeon/tree/main/skills/security-digest
Command: npx skills add https://github.com/swarm-ai-research/aeon --skill security-digest-swarm-ai-research

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill consolidates CISA KEV findings, EPSS data, and GitHub advisories into a prioritized, actionable patch plan, reducing time spent on vulnerability triage.

Core Features & Use Cases

  • Load KEV, fetch advisories, and enrich with EPSS to rank items.
  • Filter to tracked ecosystems and deduplicate across sources.
  • Generate patch actions categorized into PATCH TODAY, PATCH THIS WEEK, and MONITOR, with concrete remediation steps.

Quick Start

Provide or confirm your tracked stack and run the daily security digest to receive patch recommendations.

Frequently Asked Questions about Security Digest

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prioritize CVE patching using KEV and EPSS data?

Identify actively exploited vulnerabilities by cross-referencing CISA KEV data with GitHub advisories and filtering them against your tracked ecosystems to generate a daily ranked patch plan.

How do I generate a daily security digest for tracked ecosystems?

Generate a patch plan by providing your tracked stack, running the digest to fetch advisories, and categorizing deduplicated items into PATCH TODAY, PATCH THIS WEEK, and MONITOR with concrete remediation steps.

Do I need curl or gh to fetch vulnerability advisories and EPSS data?

Yes, you need curl or gh to fetch vulnerability advisories and EPSS data because the skill requires these tools to pull CISA KEV findings and GitHub advisory records.

What is the best way to rank vulnerabilities actively exploited in the wild?

Rank vulnerabilities actively exploited in the wild by applying a combination of KEV, EPSS, and CVSS signals to categorize them into immediate, weekly, and monitoring patch actions.

Can I filter GitHub advisories to match my tracked stack and deduplicate sources?

Yes, you can filter GitHub advisories to match your tracked ecosystems and deduplicate overlapping vulnerability entries across CISA KEV, GitHub, and EPSS data sources for a consolidated patch plan.