360 Secure SkillHub
360 安全技能中心

Cyber KEV Triage

该 Skill 收集含 CVE、CVSS、利用状态和受影响资产的漏洞清单,结合资产关键性评分排序,输出补丁优先级分层、修复摘要与处置时限建议;内置脚本生成确定性排序结果,参考文档说明评分依据,仅限防御性修复用途。

0x-professor
0x-professor
热度 87.47
最近更新 2026-05-17 12:51:24
分类:安全依赖:代码执行 / 读写文件应用场景:报告撰写 / 工作流 / 数据处理

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add cyber-kev-triage
Metadata
name
cyber-kev-triage
description
Prioritize vulnerability remediation using KEV-style exploitation context plus asset criticality. Use for CVE triage, patch order decisions, and remediation reporting.

Cyber KEV Triage

Overview

Create a patch-priority plan by combining vulnerability severity, exploitation status, and business criticality of affected assets.

Workflow

  1. Collect vulnerabilities with CVE, CVSS, exploitation indicator, and affected asset.
  2. Map each vulnerability to asset criticality.
  3. Score and rank vulnerabilities into patch priority tiers.
  4. Produce concise remediation summary and due-window guidance.

Use Bundled Resources

  • Run scripts/kev_triage.py for deterministic triage output.
  • Read references/triage-method.md for scoring rationale and review checks.

Guardrails

  • Keep output defensive and remediation-focused.
  • Do not generate exploit payloads or offensive execution steps.