Security

Cyber KEV Triage

Try it

Prioritize vulnerability remediation using KEV-style exploitation context plus asset criticality. Use for CVE triage, patch order decisions, and remediation...

What it does

Prioritize vulnerability remediation using KEV-style exploitation context plus asset criticality. Use for CVE triage, patch order decisions, and remediation...

The skill document

Cyber KEV Triage

Overview

Create a patch-priority plan by combining vulnerability severity, exploitation status, and business criticality of affected assets.

Workflow

  1. Collect vulnerabilities with CVE, CVSS, exploitation indicator, and affected asset.
  2. Map each vulnerability to asset criticality.
  3. Score and rank vulnerabilities into patch priority tiers.
  4. Produce concise remediation summary and due-window guidance.

Use Bundled Resources

  • Run scripts/kev_triage.py for deterministic triage output.
  • Read references/triage-method.md for scoring rationale and review checks.

Guardrails

  • Keep output defensive and remediation-focused.
  • Do not generate exploit payloads or offensive execution steps.

Related skills

Cybersecurity

Triage alerts, investigate compromises, prioritize vulnerabilities, and write detections and reports.

44 installs1 stars

clawsec-suite

Advisory-feed monitoring, signed-trust verification, and approval-gated response for OpenClaw skills, bundled in one suite.

357 installs8 stars

agent-bom runtime

AI runtime security monitoring — context graph analysis, runtime audit log correlation with CVE findings, and vulnerability analytics queries. Use when the user mentions runtime monitoring, context graphs, lateral movement analysis, audit log correlation, or vulnerability analytics.

73 installs

Cyber OWASP Review

Map application security findings to OWASP Top 10 categories and generate remediation checklists. Use for normalized AppSec review outputs and category-level...

40 installs

Cyber IR Playbook

Build incident response timelines and report packs from event logs. Use for detection-to-recovery reporting, phase tracking, and stakeholder-ready incident s...

25 installs

Agentsec

Audit AI agent skills for security vulnerabilities. Use when scanning installed skills against the OWASP Agentic Skills Top 10, checking skills before runnin...

29 installs1 stars