Run2 csv reporting
[COLM'26] SkillLearnBench is the first benchmark for evaluating continual learning methods that automatically generate agent skills.
npx -y skills add cxcscmu/SkillLearnBench --skill run2_csv-reportingAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
What its author says it does
Copied from the file, not written here
Generate structured CSV security audit reports from Trivy JSON vulnerability data with deduplication, proper quoting, and field mapping.
SKILL.md
2.2 KB, 539 tokens by cl100k_base, as published. Nobody here has run it
Vulnerability CSV Reporting
Target CSV Schema
Package,Version,CVE_ID,Severity,CVSS_Score,Fixed_Version,Title,Url
Complete Python Script
import csv, json
def get_cvss_score(vuln):
cvss = vuln.get("CVSS") or {}
for source in ["nvd", "ghsa", "redhat"]:
entry = cvss.get(source)
if entry:
score = entry.get("V3Score")
if score is not None:
return score
return "N/A"
with open("/root/trivy_results.json") as f:
data = json.load(f)
rows = []
seen = set()
for result in data.get("Results", []):
for vuln in (result.get("Vulnerabilities") or []):
key = (vuln.get("PkgName"), vuln.get("VulnerabilityID"))
if key in seen:
continue
seen.add(key)
title = vuln.get("Title") or vuln.get("Description") or ""
rows.append({
"Package": vuln.get("PkgName", ""),
"Version": vuln.get("InstalledVersion", ""),
"CVE_ID": vuln.get("VulnerabilityID", ""),
"Severity": vuln.get("Severity", ""),
"CVSS_Score": get_cvss_score(vuln),
"Fixed_Version": vuln.get("FixedVersion") or "N/A",
"Title": title,
"Url": vuln.get("PrimaryURL", ""),
})
with open("/root/security_audit.csv", "w", newline="") as csvfile:
writer = csv.DictWriter(csvfile, fieldnames=[
"Package", "Version", "CVE_ID", "Severity",
"CVSS_Score", "Fixed_Version", "Title", "Url"
])
writer.writeheader()
writer.writerows(rows)
print(f"Written {len(rows)} vulnerabilities")
Key considerations
- Deduplication: Use (PkgName, VulnerabilityID) as unique key since same package may appear multiple times
- Null handling:
FixedVersionandVulnerabilitiescan be None/null — useorfallbacks - Title fallback: Use
DescriptionifTitleis null - CSV quoting: Python's
csv.DictWriterhandles quoting automatically for fields containing commas - Fixed version: May contain comma-separated values for multiple branches — CSV writer handles quoting