Cyber kev triage
Prioritize vulnerability remediation using KEV-style exploitation context plus asset criticality. Use for CVE triage, patch order decisions, and remediation reporting.From its SKILL.md
npx -y skills add 0x-Professor/Agent-Skills-Hub --skill cyber-kev-triageAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
2 things to look at
- 10 stars10 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
- runs commandsInstructs the agent to run 1 command, including `Run `scripts/kev_triage.py``.
SKILL.md
0.9 KB, 149 tokens by cl100k_base, as published. Nobody here has run it
Cyber KEV Triage
Overview
Create a patch-priority plan by combining vulnerability severity, exploitation status, and business criticality of affected assets.
Workflow
- Collect vulnerabilities with CVE, CVSS, exploitation indicator, and affected asset.
- Map each vulnerability to asset criticality.
- Score and rank vulnerabilities into patch priority tiers.
- Produce concise remediation summary and due-window guidance.
Use Bundled Resources
- Run
scripts/kev_triage.pyfor deterministic triage output. - Read
references/triage-method.mdfor scoring rationale and review checks.
Guardrails
- Keep output defensive and remediation-focused.
- Do not generate exploit payloads or offensive execution steps.
What ships with it: 3 files
5.6 KB alongside SKILL.md, 1 of them executable
agents/
- openai.yaml205 B
references/
- triage-method.md739 B
scripts/
- kev_triage.pyruns4.7 KB