Menu

Individual skill

cve-epss-guide

0upvotes

Not available

skills/codex/cve-epss-guide/SKILL.md

Read pinned source

Source commit a991acae1b74d338ca89ec2245eaa13ad680dc8f

What was checked

Matches the observed repository HEAD
Yes
Scanner rules are current
No
Repository scan complete
No
Skill scan complete
No
Observed behavior
Not checked yet
Last checked
Nov 11, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

Standard SKILL.md format has not been attested at this commit. No installation command is available; inspect the source.

Repository context

Repository stars (not skill ratings)
39
Repository last updated
Jul 8, 2026
License
Apache-2.0

Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.

Declared tags are partial or unavailable.

Files and excerpt

File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.

Browse files
Read excerpt
<!-- AUTO-GENERATED by export-skills.py — DO NOT EDIT -->
---
name: cve-epss-guide
description: CVE/NVD/EPSS vulnerability prioritization guide for risk-based remediation
---

# CVE/NVD/EPSS Vulnerability Prioritization Guide

## Overview

Vulnerability management generates more findings than any team can remediate simultaneously. Effective prioritization separates critical risks from noise. This skill combines three complementary data sources to produce actionable remediation priorities:

- **CVE (Common Vulnerabilities and Exposures)** -- unique identifiers for publicly known vulnerabilities, managed by MITRE and assigned by CVE Numbering Authorities (CNAs)
- **NVD (National Vulnerability Database)** -- NIST-maintained database that enriches CVEs with CVSS scores, CWE classifications, and CPE (affected product) data
- **EPSS (Exploit Prediction Scoring System)** -- FIRST.org model that predicts the probability a vulnerability will be exploited in the wild within the next 30 days
Back to top