360 Secure SkillHub
360 安全技能中心

Cyber KEV Triage

核心功能:整合漏洞严重程度、利用状态及受影响资产的业务优先级,对漏洞评分排序,生成补丁修复优先级层级,输出简洁修复摘要与时限指导。典型场景:CVE漏洞分流、补丁修复顺序决策、修复工作汇报。输入含CVE、CVSS、利用标识及受影响资产的漏洞数据,可通过配套脚本获取确定性输出,且输出仅聚焦修复,不生成攻击内容。

0x-professor
0x-professor
热度 59.97
最近更新 2026-05-17 12:51:24
分类:安全依赖:代码执行应用场景:报告撰写 / 数据处理

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add cyber-kev-triage
Metadata
name
cyber-kev-triage
description
Prioritize vulnerability remediation using KEV-style exploitation context plus asset criticality. Use for CVE triage, patch order decisions, and remediation reporting.

Cyber KEV Triage

Overview

Create a patch-priority plan by combining vulnerability severity, exploitation status, and business criticality of affected assets.

Workflow

  1. Collect vulnerabilities with CVE, CVSS, exploitation indicator, and affected asset.
  2. Map each vulnerability to asset criticality.
  3. Score and rank vulnerabilities into patch priority tiers.
  4. Produce concise remediation summary and due-window guidance.

Use Bundled Resources

  • Run scripts/kev_triage.py for deterministic triage output.
  • Read references/triage-method.md for scoring rationale and review checks.

Guardrails

  • Keep output defensive and remediation-focused.
  • Do not generate exploit payloads or offensive execution steps.