Vulnerability csv reporting

Skill cxcscmu/SkillLearnBench/skills/b1-one-shot-claude-opus-4-6/dependency-vulnerability-check/vulnerability-csv-reporting

[COLM'26] SkillLearnBench is the first benchmark for evaluating continual learning methods that automatically generate agent skills.

Install

npx -y skills add cxcscmu/SkillLearnBench --skill vulnerability-csv-reporting

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

What its author says it does

Copied from the file, not written here

Generate structured CSV security audit reports from vulnerability data with proper filtering and formatting.

SKILL.md

1.9 KB, 414 tokens by cl100k_base, as published. Nobody here has run it

Vulnerability CSV Reporting

Overview

Convert vulnerability scan results (JSON) into a structured CSV report suitable for security audits.

CSV Schema

Package,Version,CVE_ID,Severity,CVSS_Score,Fixed_Version,Title,Url

Python Implementation

import csv
import json

def generate_csv(trivy_json_path, output_csv_path):
    with open(trivy_json_path) as f:
        data = json.load(f)

    rows = []
    for result in data.get("Results", []):
        for vuln in result.get("Vulnerabilities", []):
            cvss = vuln.get("CVSS", {})
            score = extract_cvss_score(cvss)
            fixed = vuln.get("FixedVersion", "N/A") or "N/A"
            title = vuln.get("Title") or vuln.get("Description", "")[:120] or ""
            rows.append({
                "Package": vuln.get("PkgName", ""),
                "Version": vuln.get("InstalledVersion", ""),
                "CVE_ID": vuln.get("VulnerabilityID", ""),
                "Severity": vuln.get("Severity", ""),
                "CVSS_Score": score,
                "Fixed_Version": fixed,
                "Title": title,
                "Url": vuln.get("PrimaryURL", ""),
            })

    with open(output_csv_path, "w", newline="") as f:
        writer = csv.DictWriter(f, fieldnames=[
            "Package", "Version", "CVE_ID", "Severity",
            "CVSS_Score", "Fixed_Version", "Title", "Url"
        ])
        writer.writeheader()
        writer.writerows(rows)

Key Considerations

Use csv.DictWriter for reliable CSV output (handles quoting/escaping)
Fixed version may be empty — default to "N/A"
Title may be missing — fall back to truncated Description
Deduplicate if needed (same CVE for same package)