cyberedge-correlate-cves

Correlate exact, evidence-backed CPE identities already observed by CyberEdge with normalized NVD CVE records. Use when an AI operator must run CVE intelligence for an authorized Scope, interpret CVSS metadata and lifecycle state, or distinguish completed CPE coverage from missing identity or provider failure without guessing products or versions.

Ir a la instalación

Repositorio: Symph0nia/CyberEdge
Última actividad en el origen: 23 de julio de 2026 a las 01:41
Idioma detectado de SKILL.md: inglés
Estrellas: 611
Forks: 75

Opciones de instalación

De forma predeterminada está seleccionado el prompt que primero revisa el origen. Puedes cambiar a un comando directo o descargar una copia local.

Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.

Un comando directo omite el prompt de revisión. Revisa el origen antes de ejecutarlo.

npx skills add https://github.com/Symph0nia/CyberEdge --skill cyberedge-correlate-cves

El comando permanece en una sola línea. Desplázate horizontalmente para revisarlo antes de copiarlo.

¿Prefieres una copia local? Descarga los archivos que SkillsMP tiene disponibles ahora.

Revisa los archivos de origen

Lee SKILL.md y los archivos complementarios que muestra SkillsMP antes de decidir si quieres instalarlo.

Explorador de archivos

3 archivos

SKILL.md

Instrucciones de origen · Vista previa de solo lectura

Volver a la búsqueda Volver a la instalación

cyberedge-assess-scope

Run or continuously monitor one evidence-backed CyberEdge assessment workflow for an explicitly authorized Scope. Use when an AI operator must check readiness, expand domain assets, inventory services and websites, run bounded vulnerability and intelligence stages, follow one Task, create an explicitly requested recurring assessment, inspect exposure changes, and report exact coverage without claiming unavailable adapters were completed.

2026-07-29

cyberedge-monitor-public-code

Search bounded GitHub public-code metadata for exact domain names in an explicitly authorized CyberEdge Scope. Use when an AI operator must run public-code intelligence, inspect evidence-backed reference candidates, or distinguish completed negative coverage from provider failure without retrieving source content or claiming confirmed credential leakage.

2026-07-23

cyberedge-observe-certificates

Collect and inspect TLS leaf certificates for an explicitly authorized CyberEdge scope. Use only when an authorization reference already exists and active service discovery is permitted.

2026-07-23

Ver todos los de este repositorio

CyberEdge Correlate CVEs

Use cyberedge-agent; this machine bridge is not a human CLI.

Preconditions

Require an existing authorized Scope with Website inventory produced by policy_service_baseline.

Require at least one TechnologyFingerprint containing both an exact cpe_name and its cpe_source provenance.

Require this exact Skill/version grant with scan.intelligence, task.read, finding.read, evidence.read, and report.read.

Workflow

Start policy_cve_intelligence for the authorized Scope. Never submit a CPE or CVE query directly.

Watch the Task until it becomes terminal.

Correlate each detector=nvd-cve Finding with its nvd.cve.result Observation and normalized JSON Evidence.

Report the exact CPE, CPE source, CVE ID, NVD status, CVSS score/vector/severity, Evidence ID, references, and Finding lifecycle state.

Treat nvd.cve.coverage as completed negative coverage only for that exact CPE and Asset.

Treat nvd.cve.error or nvd.cve.no_targets as unknown coverage. Do not claim the Scope is free of known vulnerabilities.

An NVD association means the observed exact product identity falls within NVD applicability data. It does not prove exploitability, reachability, or successful exploitation. State this distinction in reports.

Never infer or edit CPEs, query broad vendor/product wildcards, invoke NVD directly, fetch proof-of-concept code, or upgrade confidence beyond the retained Evidence.

{"request_id":"req-1","idempotency_key":"idem-1","agent_id":"codex-main","skill_name":"cyberedge-correlate-cves","skill_version":"0.1.0","action":"start_scan","scope_id":"scope-id","policy_id":"policy_cve_intelligence"}