Triage CVEs and scanner findings into remediation decisions with SLAs.
npx skills add https://github.com/JayRHa/AgentSkills --skill vulnerability-triage
Please help me install this Agent Skill. Skill: vulnerability-triage Source: https://github.com/JayRHa/AgentSkills/tree/main/vulnerability-triage Command: npx skills add https://github.com/JayRHa/AgentSkills --skill vulnerability-triage
Vulnerability triage turns a flood of scanner findings or a single CVE into a ranked, justified remediation decision by combining CVSS scores, exploitability signals (EPSS, KEV, PoCs), exposure, and business impact into actionable SLAs.
In a triage run, feed the findings into the scorer to obtain a prioritized list with SLAs and rationale, then act on top-P0 items first.
High-intent search queries and answers about installing and using this skill.
Vulnerability triage prioritizes CVE scanner findings by combining CVSS base scores, EPSS exploitability signals, and KEV status with asset exposure to generate defensible remediation SLAs. This multi-signal scoring model outputs a ranked list with clear rationale for patch prioritization.
Vulnerability triage deduplicates scanner findings by root cause and assesses reachability to produce unified risk assessments. It groups redundant vulnerabilities across production, cloud, and on-prem environments to assign accurate remediation SLAs for leadership visibility.
Vulnerability triage generates auditable remediation memos and risk assessments from structured CVE triage decisions. By applying a transparent scoring model to scanner outputs, it produces defensible documentation for audits, leadership reviews, and incident response.
Vulnerability triage requires structured input including CVSS base scores, KEV and EPSS signals, exposure data, asset criticality, data sensitivity, and SLA targets. Feeding these parameters into the scorer yields an auditable remediation decision with clear rationale.
Vulnerability triage applies a reproducible multi-signal risk scoring framework across cloud and on-prem environments. It evaluates exposure, asset criticality, and exploitability to assign SLA-driven remediation priorities, ensuring consistent patch management decisions.
Vulnerability triage is necessary when CVSS scores alone lack business context, requiring EPSS, KEV, and asset criticality to justify remediation. Use it to translate raw scanner findings into SLA-driven, auditable patch decisions for production, cloud, and on-prem environments.
DCx7C5Prioritize CVEs by CVSS scores enriched with EPSS and KEV data.
PatkikGuide production incident triage and remediation with SLO and observability practices.
daemon-blockint-techModels cyber assets and vulnerabilities using MITRE D3FEND references and linked workflows.
dreadnodeFilter low-quality and false positive vulnerability findings from scanners and agent output.
