Vulnerability csv reporting

Skill cxcscmu/SkillLearnBench/skills/b1-one-shot-gemini-3-flash-preview/dependency-vulnerability-check/vulnerability-csv-reporting

[COLM'26] SkillLearnBench is the first benchmark for evaluating continual learning methods that automatically generate agent skills.

Install

npx -y skills add cxcscmu/SkillLearnBench --skill vulnerability-csv-reporting

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

What its author says it does

Copied from the file, not written here

Generate structured CSV security audit reports from vulnerability data with proper filtering and formatting.

SKILL.md

2.0 KB, 407 tokens by cl100k_base, as published. Nobody here has run it

Vulnerability CSV Reporting

Creating a clear and structured CSV report is essential for communicating security audit findings.

CSV Schema

For a standard security audit, the following columns are often used: Package,Version,CVE_ID,Severity,CVSS_Score,Fixed_Version,Title,Url

Python Example for CSV Generation

Using the csv module in Python ensures proper escaping of fields that might contain commas or quotes (like titles and descriptions).

import csv
import json

def generate_report(vulnerabilities, output_file):
    headers = ['Package', 'Version', 'CVE_ID', 'Severity', 'CVSS_Score', 'Fixed_Version', 'Title', 'Url']
    
    with open(output_file, 'w', newline='') as f:
        writer = csv.DictWriter(f, fieldnames=headers)
        writer.writeheader()
        
        for vuln in vulnerabilities:
            # Filter for High/Critical if not already done
            if vuln['Severity'] not in ['HIGH', 'CRITICAL']:
                continue
                
            writer.writerow({
                'Package': vuln.get('PkgName'),
                'Version': vuln.get('InstalledVersion'),
                'CVE_ID': vuln.get('VulnerabilityID'),
                'Severity': vuln.get('Severity'),
                'CVSS_Score': extract_cvss(vuln.get('CVSS')), # Using logic from CVSS skill
                'Fixed_Version': vuln.get('FixedVersion') or 'N/A',
                'Title': vuln.get('Title') or vuln.get('Description', '')[:100],
                'Url': vuln.get('PrimaryURL')
            })

Best Practices