ingest-cwe-taxonomies

Ingest the official MITRE CWE database and generate per-domain security audit taxonomies for PromptKit. Use this skill when the user wants to update CWE taxonomies, ingest a new CWE version, or regenerate domain mappings from the CWE corpus.

Jump to install

Repository: microsoft/PromptKit
Last source activity: April 8, 2026 at 15:58
Detected SKILL.md language: English
Stars: 102
Forks: 21

Install options

The review-first prompt is selected by default. You can switch to a direct command or download a local copy.

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

A direct command skips the review prompt. Inspect the source before running it.

npx skills add https://github.com/microsoft/PromptKit --skill ingest-cwe-taxonomies

The command stays on one line. Scroll horizontally to inspect it before copying.

Prefer a local copy? Download the files currently available to SkillsMP.

Review the source files

Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.

SKILL.md

Source instructions · Read-only preview

Back to search Back to installation

respond-to-pr-comments

Respond to pull request review comments on GitHub or Azure DevOps Services. Reads review threads, validates each, proposes fixes or explanations, applies changes with user confirmation, and updates thread status via the platform's API. Use when the user wants to address PR feedback or resolve review threads.

2026-05-06

boot

Shorthand alias for the /promptkit skill. Use this when the user wants to assemble a task-specific prompt using PromptKit, or says "boot" to start the PromptKit composition engine.

2026-04-04

bootstrap

Alias for the /promptkit skill. Use this when the user wants to assemble a task-specific prompt using PromptKit, or says "bootstrap" to start the PromptKit composition engine.

2026-04-04

View all from this repository

name	ingest-cwe-taxonomies
description	Ingest the official MITRE CWE database and generate per-domain security audit taxonomies for PromptKit. Use this skill when the user wants to update CWE taxonomies, ingest a new CWE version, or regenerate domain mappings from the CWE corpus.

You must read and execute the prompt file at .github/prompts/ingest-cwe-taxonomies.prompt.md. Treat it as the complete, self-contained instruction set for the CWE ingestion pipeline.

Inputs

CWE source: A local path to a CWE XML file, or latest to download the current release from https://cwe.mitre.org/data/xml/cwec_latest.xml.zip.
Any overrides to the domain registry or mapping rules the user specifies.

Output

Per-domain taxonomy files at taxonomies/cwe-<domain>.md (13 domains)
Normalized CWE data at data/cwe/<version>/
Updated manifest.yaml with new taxonomy entries
Reusable ingestion script at scripts/ingest-cwe.py
Diff report if a previous CWE version exists

Workflow

Read .github/prompts/ingest-cwe-taxonomies.prompt.md before doing anything else.
Ask the user for the CWE source (path or latest).
Follow all six phases defined in the prompt file: Acquisition, Normalization, Domain Mapping, Taxonomy Generation, Integration, and Verification.
Do NOT skip the sanity checks in Phase 6.

ingest-cwe-taxonomies

Source facts

Install options

Review the source files

More from this repository

More from this repository

Inputs

Output

Workflow

Inputs

Output

Workflow