vulnerabilities-SKILL.md

Prioritize CVEs by CVSS scores enriched with EPSS and KEV data.

Updated Apr 20, 2026

Search Tags:#prioritization #vulnerabilities #risk #cvss #kev #epss #cisa-kev

Ready to run

npx skills add https://github.com/DCx7C5/ai-marketplace --skill vulnerabilities-skill-md

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: vulnerabilities-SKILL.md
Source: https://github.com/DCx7C5/ai-marketplace/tree/main/skills/vulnerabilities/prioritization/vulnerabilities
Command: npx skills add https://github.com/DCx7C5/ai-marketplace --skill vulnerabilities-skill-md

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Prioritize CVEs by CVSS scores enriched with EPSS and CISA KEV data to focus remediation efforts on the riskiest vulnerabilities.

Core Features & Use Cases

CVSS-based prioritization: compute CVSS scores (v4.0/v3.1) and rank vulnerabilities by risk.
Threat intelligence enrichment: incorporate EPSS probabilities and KEV status to adjust priority.
Actionable reporting: generate prioritized lists and SLA guidance for remediation in security operations.

Quick Start

Run the vulnerability prioritization workflow on your CVE list to obtain a risk-weighted remediation plan.

Frequently Asked Questions about vulnerabilities-SKILL.md

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I prioritize vulnerabilities using CVSS and EPSS data?▼

Vulnerability prioritization ranks CVEs by computing CVSS v4.0 or v3.1 scores and enriching them with EPSS probabilities and CISA KEV status to generate a risk-weighted remediation plan.

What is the best way to rank CVEs by risk for remediation planning?▼

Ranking CVEs by risk requires combining CVSS base scores with EPSS exploitation likelihood and CISA KEV status checks to produce a prioritized list with SLA guidance for security operations.

How does CISA KEV status enrichment adjust vulnerability priority?▼

CISA KEV enrichment adjusts vulnerability priority by flagging CVEs with known exploitation status, elevating them above vulnerabilities with similar CVSS scores but lower actual threat activity.

Can I generate SLA guidance for a list of CVEs across multiple vulnerabilities?▼

Yes, the vulnerability prioritization workflow processes a CVE list to generate actionable reporting that includes prioritized remediation sequences and SLA guidance based on weighted risk scores.

Does this vulnerability prioritization workflow support CVSS v4.0 scoring?▼

Yes, the workflow supports CVSS v4.0 scoring alongside v3.1, computing base scores and enriching them with EPSS and KEV data to deliver comprehensive risk-weighted prioritization.

Do I need any specific dependencies to run the CVE prioritization workflow?▼

You need the Python requests library installed to execute the vulnerability prioritization scripts, which fetch EPSS probabilities and KEV data to enrich your CVSS-based risk rankings.