360 Secure SkillHub
360 安全技能中心

Ntriq Cisa Alert Monitor

该Skill描述了一个查询CISA已知被利用漏洞(KEV)目录的外部接口,支持按CVE编号、厂商、距修补截止天数与严重级别过滤,返回漏洞名称、加入日期、修补期限、CVSS描述及所需操作等字段,并附带服务目录调用示例。实际查询端点、鉴权与错误处理未在材料中说明。

ntriq-gh
ntriq-gh
热度 22.19
最近更新 2026-04-08 22:56:48
分类:安全依赖:第三方 API应用场景:研究 / 报告撰写

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add ntriq-cisa-alert-monitor
Metadata
name
ntriq-cisa-alert-monitor
description
Free API to monitor CISA Known Exploited Vulnerabilities (KEV). No subscription. Track actively exploited CVEs with government alerts, due dates, and priority guidance. Government data, pay-per-use.
version
1.0.0
metadata
{"openclaw":{"primaryTag":"data-intelligence","tags":["cybersecurity","threat"],"author":"ntriq","homepage":"https://x402.ntriq.co.kr"}}

CISA Alert Monitor

Real-time monitoring of CISA's Known Exploited Vulnerabilities (KEV) catalog via free government API. Track actively exploited CVEs with patch due dates, CVSS scores, and vendor guidance. No API key required.

Parameters

Parameter Type Required Description
cve_id string ❌ Lookup specific CVE (e.g., CVE-2024-1234)
vendor string ❌ Filter by vendor name (e.g., Microsoft, Cisco)
days_to_due integer ❌ Filter by patch deadline within N days
severity string ❌ critical, high, medium, low

Example Response

{
  "cveID": "CVE-2024-21887",
  "vendorProject": "Ivanti",
  "product": "Connect Secure, Policy Secure",
  "vulnerabilityName": "Ivanti Connect Secure Command Injection",
  "dateAdded": "2024-01-10",
  "dueDate": "2024-01-22",
  "shortDescription": "Ivanti Connect Secure and Policy Secure contain a command injection vulnerability.",
  "requiredAction": "Apply mitigations per vendor instructions or discontinue use.",
  "cwes": ["CWE-77"]
}

Use Cases

  • Daily SOC vulnerability prioritization feed
  • CISO patch compliance dashboard integration
  • Fed contractor FISMA reporting automation

Access

# Service catalog
curl https://x402.ntriq.co.kr/services

Available on Apify Store · x402 micropayments