vuln-nist
NIST vulnerability database lookup and CVE analysis
When & Why to Use This Skill
This Claude skill provides a powerful interface for the NIST National Vulnerability Database, enabling real-time CVE lookups, CVSS score analysis, and CPE matching. It streamlines the vulnerability management lifecycle by offering structured data retrieval and reporting tools, significantly reducing the manual effort required for security research and risk assessment.
Use Cases
- Vulnerability Assessment: Rapidly identifying the severity and impact of specific CVEs to prioritize patching and remediation efforts.
- Compliance Auditing: Generating detailed vulnerability reports and severity summaries to meet regulatory requirements and security standards.
- Dependency Security: Enabling developers to verify the security posture of third-party libraries and software components by matching them against the NIST database.
- Incident Response: Providing security teams with immediate access to technical vulnerability data and affected product lists during active threat investigations.
| name | vuln-nist |
|---|---|
| description | NIST vulnerability database lookup and CVE analysis |
| version | 1.0.0 |
| allowed-tools | [Bash, Read, WebFetch] |
NIST Vulnerability Skill
Overview
NIST National Vulnerability Database lookup. 90%+ context savings.
Tools (Progressive Disclosure)
CVE Lookup
| Tool | Description |
|---|---|
| search-cve | Search CVEs by keyword |
| get-cve | Get CVE details by ID |
| recent-cves | List recent CVEs |
Analysis
| Tool | Description |
|---|---|
| cvss-score | Get CVSS score |
| cpe-match | Match CPE identifiers |
| affected-products | List affected products |
Reporting
| Tool | Description |
|---|---|
| export-json | Export CVE data as JSON |
| severity-summary | Summarize by severity |
Agent Integration
- security-architect (primary): Vulnerability assessment
- compliance-auditor (primary): Compliance reporting
- developer (secondary): Dependency security