Individual skill

cve-analysis

CVE(Common Vulnerabilities and Exposures) 분석 방법론, 의존성 취약점 스캔 도구 활용, CVSS 점수 해석, 취약점 우선순위 결정 가이드. 'CVE', '취약점 분석', '의존성 취약점', 'CVSS', 'npm audit', 'Snyk', 'Trivy', 'CVE 데이터베이스', '취약점 우선순위' 등 CVE 기반 취약점 분석 시 이 스킬을 사용한다. vulnerability-scanner의 스캐닝 역량을 강화한다. 단, 실제 침투 테스트 실행이나 코드 수정은 이 스킬의 범위가 아니다.

ko/28-security-audit/.claude/skills/cve-analysis/skill.md

Read pinned source

Source commit 8e8d35c6a19166614d1af1df85512266d51121ae

What was checked

Matches the observed repository HEAD
Yes
Scanner rules are current
Yes
Repository scan complete
No
Skill scan complete
No
Observed behavior
Network or broad shell
Last checked
Nov 9, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.

Repository context

Repository stars (not skill ratings)
1,324
Repository last updated
Mar 22, 2026
License
Apache-2.0

Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.

Files and excerpt

File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.

Browse files
Read excerpt

# CVE Analysis — CVE 분석 및 의존성 취약점 관리 가이드

CVE 기반 취약점을 효율적으로 탐지, 분석, 우선순위화하는 방법론.

## CVSS v3.1 점수 체계

### Base Score 벡터

```
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H → 9.8 (Critical)

AV (Attack Vector):    N(Network) > A(Adjacent) > L(Local) > P(Physical)
AC (Attack Complexity): L(Low) > H(High)
PR (Privileges Required): N(None) > L(Low) > H(High)
Back to top