vulnerability-SKILL.md

Compute vulnerability aging metrics and SLA compliance from discovery and remediation data.

Updated Apr 20, 2026
One-click install
npx skills add https://github.com/DCx7C5/ai-marketplace --skill vulnerability-skill-md
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vulnerability-SKILL.md
Source: https://github.com/DCx7C5/ai-marketplace/tree/main/skills/vulnerabilities/management/vulnerability
Command: npx skills add https://github.com/DCx7C5/ai-marketplace --skill vulnerability-skill-md

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pandas, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

Vulnerability teams struggle to quantify remediation performance and enforce timely patching. This Skill provides a centralized aging and SLA tracking capability to turn vulnerability data into actionable metrics and alerts.

Core Features & Use Cases

  • Aging dashboard: visualize time-to-remediate by severity, asset, and discovery date.
  • SLA policy modeling: define severity-based deadlines and adaptive modifiers, with automated escalation triggers.
  • KPI reporting: MTTR, SLA compliance rate, overdue counts, and escalation readiness for security governance and ITSM integration.
  • Use Case: For a large enterprise with daily vulnerability scans, generate dashboards that show open vulns, aging distribution, and escalation lists to drive remediation.

Quick Start

Load your vulnerability dataset and run the aging analysis to generate the initial aging report and KPI snapshot.

Frequently Asked Questions about vulnerability-SKILL.md

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I track vulnerability aging and SLA compliance from scan data?

You can model severity-based SLA deadlines and adaptive modifiers to establish vulnerability remediation policies. This enables automated escalation triggers and generates escalation readiness lists for ITSM integration when patching deadlines are breached.

Can I use pandas to calculate MTTR and overdue vulnerability counts?

Yes, pandas is used to process vulnerability datasets and calculate Mean Time To Remediate (MTTR), overdue counts, and SLA compliance rates. The computation applies across open and closed vulnerabilities with different severities to produce KPI reporting outputs.

What is vulnerability aging distribution and when do I need it for SecOps?

Vulnerability aging distribution visualizes time-to-remediate by severity, asset, and discovery date to reveal remediation efficiency. You need it for SecOps governance when struggling to quantify remediation performance and enforce timely patching across daily vulnerability scans.

Does this vulnerability dashboard approach support both open and closed vulnerabilities?

Yes, the dashboard analysis supports both open and closed vulnerabilities across different severity levels. It applies configurable SLA policies to the combined dataset to generate comprehensive aging reports, KPI snapshots, and automated escalation triggers for security governance.

What are the limitations of using pandas for vulnerability SLA tracking?

Using pandas for vulnerability SLA tracking requires structured discovery and remediation datasets to compute aging metrics accurately. You must ensure your vulnerability datasets and ITSM workflows are properly formatted before generating aging distributions and escalation lists.