skills.rest
braydos-h
braydos-hCOMMUNITY
Explore all skills by this author →
GitHub

prioritizing-vulnerabilities-with-cvss-scoring

Prioritize vulnerabilities using CVSS scores, EPSS exploit probability, and CISA KEV data.

4|Updated Apr 28, 2026
Search Tags:#vulnerability management#risk scoring#cvss#cve#epss#vulnerability prioritization#cisa kev
One-click install
npx skills add https://github.com/braydos-h/BreachPilot --skill prioritizing-vulnerabilities-with-cvss-scoring-braydos-h
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: prioritizing-vulnerabilities-with-cvss-scoring
Source: https://github.com/braydos-h/BreachPilot/tree/main/skills/prioritizing-vulnerabilities-with-cvss-scoring
Command: npx skills add https://github.com/braydos-h/BreachPilot --skill prioritizing-vulnerabilities-with-cvss-scoring-braydos-h

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, pandas, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve? Security teams face thousands of CVEs from scanners and cannot patch everything at once. This Skill calculates CVSS base scores, enriches findings with EPSS exploit probability and CISA KEV status, and produces a risk-weighted priority ranking with remediation SLAs so teams fix the most dangerous vulnerabilities first. ## Core Features & Use Cases - CVSS Scoring: Parse CVSS v3.1 and v4.0 vector strings, calculate base scores, and map them to severity ratings from None to Critical. - Threat Intelligence Enrichment: Fetch EPSS exploit probability from the FIRST.org API and check CVEs against the CISA Known Exploited Vulnerabilities catalog. - Risk-Weighted Prioritization: Combine CVSS, EPSS, asset criticality, KEV status, and network exposure into a composite priority score with P1-P5 remediation SLAs. - Use Case: Given a CSV of 500 CVEs from a vulnerability scan, run the prioritize command to enrich each CVE with NVD, EPSS, and KEV data, then export a sorted CSV assigning each finding a priority level and remediation deadline. ## Quick Start Ask the agent to prioritize the CVEs in your vulnerability scan CSV using CVSS scoring enriched with EPSS and CISA KEV data, and output a ranked remediation report with SLAs.

Frequently Asked Questions about prioritizing-vulnerabilities-with-cvss-scoring

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prioritize vulnerabilities with CVSS and EPSS scores?▼

Calculate the CVSS base score from the vector string, fetch the EPSS exploit probability from the FIRST.org API, and check CISA KEV membership. Combine these with asset criticality and network exposure using weighted factors to produce a composite priority score mapped to remediation SLAs.

How to check if a CVE is in the CISA KEV catalog?▼

Download the known_exploited_vulnerabilities.json feed from cisa.gov and match the CVE identifier against the cveID field of each entry. The script caches the catalog in memory so repeated lookups across many CVEs require only one download.

What is the difference between CVSS v3.1 and v4.0 scoring?▼

CVSS v4.0 adds Attack Requirements, expands User Interaction to three values, replaces Scope with Subsequent System impact metrics, and introduces Supplemental metrics like Safety and Automatable. Severity thresholds remain identical across both versions.

Does the CVSS prioritization script require internet access?▼

Yes, enrichment features require internet access to query the NVD API, FIRST.org EPSS API, and CISA KEV feed. Base score calculation from a vector string works offline, but EPSS and KEV lookups fail gracefully and return zero values when unreachable.

Why should CVSS base score not be the only prioritization factor?▼

CVSS base score measures intrinsic severity but ignores real-world exploitation activity and organizational context. A medium-scored CVE listed in CISA KEV with high EPSS probability often poses more actual risk than a critical-scored CVE with no known exploit.

Related Skills

Explore More Software Engineering Skills→
BagelHoleBagelHole
46

vulnerability-scanning

Scan systems and dependencies for CVEs using Nessus, OpenVAS, and Qualys.

Community
Intermediate
UnitOneAIUnitOneAI
44

patch-prioritization

Prioritize vulnerability remediation patches using SSVC 2.1, EPSS v3, and CISA KEV.

Official
Intermediate
jaskaranhundaljaskaranhundal
3

continuous-pentesting

Assess and prioritize attack surface testing based on exploitability and threat actor usage.

Community
Advanced
xalgordxalgord
954

triaging-vulnerabilities-with-ssvc-framework

Prioritize vulnerabilities using CISA's SSVC decision tree with KEV and EPSS data.

Community
Intermediate