Menu
Robust extraction of vulnerability metadata with CVSS v3 priority and v2 fallback.
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
A direct command skips the review prompt. Inspect the source before running it.
npx skills add https://github.com/cxcscmu/SkillLearnBench --skill run2-vulnerability-extractionThe command stays on one line. Scroll horizontally to inspect it before copying.
Prefer a local copy? Download the files currently available to SkillsMP.
Handles reading, populating, and saving .docx files using the python-docx library. Use this skill for any tasks involving template filling or modifying Word documents.
Perform various data analysis on SEC 13-F and obtain some insights of fund activities such as number of holdings, AUM, and change of holdings between two quarters.
This skill includes search capability in 13F, such as fuzzy search a fund information using possibly inaccurate name, or fuzzy search a stock cusip info using its name.
Based on SOC occupation classification
Showing SKILL.md
| name | run2_vulnerability-extraction |
| description | Robust extraction of vulnerability metadata with CVSS v3 priority and v2 fallback. |
This skill provides a more resilient method for extracting security data from scanner outputs.
Prioritize CVSS v3 across multiple sources, falling back to v2 if necessary.
def get_cvss_score(vuln):
cvss = vuln.get('CVSS', {})
if not cvss:
return 'N/A'
# Try V3 Scores first across sources
for source in ['nvd', 'ghsa', 'redhat']:
score = cvss.get(source, {}).get('V3Score')
if score is not None:
return score
# Fallback to V2 Scores
for source in ['nvd', 'ghsa', 'redhat']:
score = cvss.get(source, {}).get('V2Score')
if score is not None:
return score
return 'N/A'
Always provide defaults for optional fields to prevent None values in reports.
record = {
'Package': vuln.get('PkgName', 'N/A'),
'Version': vuln.get('InstalledVersion', 'N/A'),
'CVE_ID': vuln.get('VulnerabilityID', 'N/A'),
'Severity': vuln.get('Severity', 'N/A'),
'CVSS_Score': get_cvss_score(vuln),
'Fixed_Version': vuln.get('FixedVersion', 'N/A'),
'Title': vuln.get('Title', 'N/A'),
'Url': vuln.get('PrimaryURL', 'N/A')
}