skills.rest
DCx7C5
DCx7C5COMMUNITY
Explore all skills by this author →
GitHub

vulnerabilities-SKILL.md

Prioritize CVEs by CVSS scores enriched with EPSS and KEV data.

Updated Apr 20, 2026
Search Tags:#prioritization#vulnerabilities#risk#cvss#kev#epss#cisa-kev
One-click install
npx skills add https://github.com/DCx7C5/ai-marketplace --skill vulnerabilities-skill-md
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerabilities-SKILL.md
Source: https://github.com/DCx7C5/ai-marketplace/tree/main/skills/vulnerabilities/prioritization/vulnerabilities
Command: npx skills add https://github.com/DCx7C5/ai-marketplace --skill vulnerabilities-skill-md

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Prioritize CVEs by CVSS scores enriched with EPSS and CISA KEV data to focus remediation efforts on the riskiest vulnerabilities.

Core Features & Use Cases

  • CVSS-based prioritization: compute CVSS scores (v4.0/v3.1) and rank vulnerabilities by risk.
  • Threat intelligence enrichment: incorporate EPSS probabilities and KEV status to adjust priority.
  • Actionable reporting: generate prioritized lists and SLA guidance for remediation in security operations.

Quick Start

Run the vulnerability prioritization workflow on your CVE list to obtain a risk-weighted remediation plan.

Frequently Asked Questions about vulnerabilities-SKILL.md

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prioritize vulnerabilities using CVSS and EPSS data?▼

Vulnerability prioritization ranks CVEs by computing CVSS v4.0 or v3.1 scores and enriching them with EPSS probabilities and CISA KEV status to generate a risk-weighted remediation plan.

What is the best way to rank CVEs by risk for remediation planning?▼

Ranking CVEs by risk requires combining CVSS base scores with EPSS exploitation likelihood and CISA KEV status checks to produce a prioritized list with SLA guidance for security operations.

How does CISA KEV status enrichment adjust vulnerability priority?▼

CISA KEV enrichment adjusts vulnerability priority by flagging CVEs with known exploitation status, elevating them above vulnerabilities with similar CVSS scores but lower actual threat activity.

Can I generate SLA guidance for a list of CVEs across multiple vulnerabilities?▼

Yes, the vulnerability prioritization workflow processes a CVE list to generate actionable reporting that includes prioritized remediation sequences and SLA guidance based on weighted risk scores.

Does this vulnerability prioritization workflow support CVSS v4.0 scoring?▼

Yes, the workflow supports CVSS v4.0 scoring alongside v3.1, computing base scores and enriching them with EPSS and KEV data to deliver comprehensive risk-weighted prioritization.

Do I need any specific dependencies to run the CVE prioritization workflow?▼

You need the Python requests library installed to execute the vulnerability prioritization scripts, which fetch EPSS probabilities and KEV data to enrich your CVSS-based risk rankings.

Related Skills

Explore More Data & Analytics Skills→
matteocervellimatteocervelli
25

vulnerability-assessor

Assess software vulnerabilities with CVSS scoring and remediation planning.

Community
Advanced
saolalabsaolalab
37

vulnerability-management

Track security vulnerabilities with CVSS severity mapping and SLA-aligned remediation timelines.

Official
Intermediate
dapperdiversdapperdivers
1

threat-intel-aggregator

Aggregate threat intelligence feeds and vulnerability data into daily security briefings.

Community
Advanced
zebbernzebbern
5

triage-findings

Deduplicate and prioritize vulnerability findings using CVSS, EPSS, and KEV context.

Community
Advanced