Vulnerability csv reporting

Skill cxcscmu/SkillLearnBench/skills/b1-one-shot-claude-sonnet-4-6/dependency-vulnerability-check/vulnerability-csv-reporting

[COLM'26] SkillLearnBench is the first benchmark for evaluating continual learning methods that automatically generate agent skills.

Install

npx -y skills add cxcscmu/SkillLearnBench --skill vulnerability-csv-reporting

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

What its author says it does

Copied from the file, not written here

Generate structured CSV security audit reports from Trivy JSON vulnerability data with severity filtering and proper field mapping.

SKILL.md

2.1 KB, 505 tokens by cl100k_base, as published. Nobody here has run it

Vulnerability CSV Reporting

CSV Schema

Package,Version,CVE_ID,Severity,CVSS_Score,Fixed_Version,Title,Url

Complete Report Generator

import json
import csv

def get_cvss_score(vuln):
    cvss = vuln.get('CVSS', {})
    for source in ['nvd', 'ghsa', 'redhat']:
        if source in cvss:
            score = cvss[source].get('V3Score')
            if score is not None:
                return score
    return 'N/A'

def generate_csv_report(json_input, csv_output, severity_filter=('HIGH', 'CRITICAL')):
    with open(json_input, 'r', encoding='utf-8') as f:
        data = json.load(f)

    headers = ["Package", "Version", "CVE_ID", "Severity",
               "CVSS_Score", "Fixed_Version", "Title", "Url"]

    rows = []
    for result in data.get('Results', []):
        for vuln in result.get('Vulnerabilities', []):
            if vuln.get('Severity') in severity_filter:
                rows.append({
                    "Package": vuln.get('PkgName', 'N/A'),
                    "Version": vuln.get('InstalledVersion', 'N/A'),
                    "CVE_ID": vuln.get('VulnerabilityID', 'N/A'),
                    "Severity": vuln.get('Severity', 'N/A'),
                    "CVSS_Score": get_cvss_score(vuln),
                    "Fixed_Version": vuln.get('FixedVersion') or 'N/A',
                    "Title": vuln.get('Title', 'N/A'),
                    "Url": vuln.get('PrimaryURL', 'N/A'),
                })

    with open(csv_output, 'w', newline='', encoding='utf-8') as f:
        writer = csv.DictWriter(f, fieldnames=headers)
        writer.writeheader()
        writer.writerows(rows)

    print(f"[+] {len(rows)} vulnerabilities written to {csv_output}")
    return rows

Key Notes