Skip to content
cccskills
FreePublished on GitHub

cve-stack-relevance

Decide whether a CVE or advisory matters to the actual stack and show the data behind that judgement.

The English summary is being prepared. Showing the original description.

Run score Not tested

See how to install

Files included (1)

  • SKILL.md1.3 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

CVE stack relevance

Use this for one advisory or a small related set.

Test the chain

Answer each question with evidence:

  1. Is the named package and ecosystem the one in this stack?
  2. Does the installed version fall in the verified affected range?
  3. Does the shipped service include and load it?
  4. Is the vulnerable feature or configuration present?
  5. Can an attacker meet the access and privilege conditions?
  6. What data, control, or availability could be lost?
  7. Is a fixed version or verified mitigation available?

Give a result

Label the result confirmed, likely, not affected, or unknown. Cite the advisory source and the repository, image, configuration, or runtime evidence used for each step. Explain any conflict between vendor, maintainer, and database records.

Next action

Name the smallest check or change that resolves the uncertainty or risk. Do not use absence from a scanner as proof of safety. Do not claim a fix until the fixed version is present in the built artifact and the relevant tests or checks pass.

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

Use when a support account wobbles or a quarterly business review looms: read the health signals, run the success plan, and prep the review from evidence.

The English summary is being prepared. Showing the original description.

Significant-Gravitas/skills-catalog2Updated Oct 22, 2026

Reconcile accounts by comparing GL balances to subledgers, bank statements, or third-party data. Use when performing bank reconciliations, GL-to-subledger recs, intercompany reconciliations, or identifying and categorizing reconciling items.

The English summary is being prepared. Showing the original description.

Significant-Gravitas/skills-catalog2Updated Oct 22, 2026

Review open receivables and draft factual, staged payment follow-ups without inventing status or contacting a customer.

The English summary is being prepared. Showing the original description.

Significant-Gravitas/skills-catalog2Updated Oct 22, 2026

Write ad variants that each test one idea, within platform limits and supported claims.

The English summary is being prepared. Showing the original description.

Significant-Gravitas/skills-catalog2Updated Oct 22, 2026

Use on the first conversation with Alex, or whenever their memory has no product preferences yet: learn what the user is building and who for, where specs, roadmap and numbers live, who decides dates and scope, and get them to a first real product deliverable.

The English summary is being prepared. Showing the original description.

Significant-Gravitas/skills-catalog2Updated Oct 22, 2026

Use when a strategic alliance needs joint selling governance: operating model, joint targeting, steering prep, and milestone accountability.

The English summary is being prepared. Showing the original description.

Significant-Gravitas/skills-catalog2Updated Oct 22, 2026

See all skills by Significant-Gravitas

Report a problem with this skill