Menu
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
A direct command skips the review prompt. Inspect the source before running it.
npx skills add https://github.com/cxcscmu/SkillLearnBench --skill cvss-extractionThe command stays on one line. Scroll horizontally to inspect it before copying.
Prefer a local copy? Download the files currently available to SkillsMP.
Handles reading, populating, and saving .docx files using the python-docx library. Use this skill for any tasks involving template filling or modifying Word documents.
Perform various data analysis on SEC 13-F and obtain some insights of fund activities such as number of holdings, AUM, and change of holdings between two quarters.
This skill includes search capability in 13F, such as fuzzy search a fund information using possibly inaccurate name, or fuzzy search a stock cusip info using its name.
Based on SOC occupation classification
Showing SKILL.md
| name | cvss-extraction |
| description | Extract CVSS scores from Trivy JSON output. |
Trivy outputs vulnerabilities with multiple CVSS scores depending on the source (e.g., NVD, RedHat, GHSA). This skill helps you extract the most relevant score.
In the Trivy output, vulnerabilities are nested under Results[] -> Vulnerabilities[]. Inside a vulnerability, CVSS information is stored inside the CVSS dictionary.
{
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"V3Score": 9.8
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"V3Score": 9.8
},
"ghsa": {
"V3Score": 9.8
}
}
}
You can write a Python helper to extract a CVSS score from these sources, preferring NVD if available, followed by GHSA and RedHat, falling back to "N/A" if none are present.
def extract_cvss(vuln):
cvss_data = vuln.get("CVSS", {})
# Sources in order of preference
for source in ["nvd", "ghsa", "redhat", "ubuntu", "debian", "alpine"]:
if source in cvss_data:
score = cvss_data[source].get("V3Score")
if score is not None:
return score
# Fallback to V2Score if V3 is not present
score = cvss_data[source].get("V2Score")
if score is not None:
return score
return "N/A"
This snippet ensures robust extraction of CVSS scores for reporting purposes.