CVE Research Skill

Overview

Research known vulnerabilities for project dependencies using multiple sources.

Data Sources

Workflow

1. Extract dependencies from project (package.json, etc.)
2. Query each source for known CVEs
3. Cross-reference findings across sources
4. Prioritize by CVSS score and exploitability
5. Report with fix versions and workarounds

Query Strategy

For each dependency:

1. Search OSV.dev first (fastest, most accurate for packages)
2. Cross-check NVD for CVSS scoring
3. Use Exa for recent advisories not yet in databases
4. Check GitHub Advisory for maintainer responses

Severity Mapping

References

• CVE APIs Reference
• Query Templates