skills.rest
Yenn503
Yenn503COMMUNITY
Explore all skills by this author →
WebsiteGitHub

triaging-vulnerabilities-with-ssvc-framework

Prioritize vulnerabilities using CISA's SSVC decision tree with KEV and EPSS data.

1|1|Updated Apr 3, 2026
Search Tags:#remediation#decision tree#epss#ssvc#vulnerability triage#vulnerability prioritization#cisa kev
One-click install
npx skills add https://github.com/Yenn503/Net-Runners --skill triaging-vulnerabilities-with-ssvc-framework-yenn503
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: triaging-vulnerabilities-with-ssvc-framework
Source: https://github.com/Yenn503/Net-Runners/tree/main/.netrunner/skills/reporting/triaging-vulnerabilities-with-ssvc-framework
Command: npx skills add https://github.com/Yenn503/Net-Runners --skill triaging-vulnerabilities-with-ssvc-framework-yenn503

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, pandas, jinja2.

What problem does it solve? Security teams drowning in scanner output need a defensible way to decide which vulnerabilities to fix first. CVSS scores alone ignore exploitation activity and business context, leading to misallocated remediation effort. ## Core Features & Use Cases - SSVC Decision Tree Implementation: Evaluates exploitation status, technical impact, automatability, mission prevalence, and public well-being to produce Track, Track*, Attend, or Act outcomes with defined SLAs. - Threat Intelligence Integration: Pulls CISA Known Exploited Vulnerabilities catalog and FIRST EPSS scores to determine real-world exploitation status. - Scanner Ingestion: Processes CSV and XML exports from Nessus, OpenVAS, and Qualys into structured triage reports. - Use Case: Given a Nessus export of 500 findings, run the triage script to classify each CVE, flag KEV-listed vulnerabilities as Act with 48-hour SLAs, and generate a JSON report for remediation planning. ## Quick Start Triage the vulnerabilities in my latest Nessus scan export using the SSVC framework and tell me which ones require immediate action.

Frequently Asked Questions about triaging-vulnerabilities-with-ssvc-framework

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prioritize vulnerabilities with the SSVC framework?▼

SSVC prioritization evaluates five decision points: exploitation status, technical impact, automatability, mission prevalence, and public well-being. The decision tree maps these inputs to four outcomes: Track, Track*, Attend, or Act, each with defined remediation SLAs.

How to check if a CVE is in the CISA KEV catalog?▼

Fetch the known_exploited_vulnerabilities.json feed from CISA and check whether the CVE ID appears in the vulnerabilities list. KEV-listed CVEs map to active exploitation status in the SSVC decision tree.

What is the difference between SSVC and CVSS for vulnerability triage?▼

CVSS measures technical severity of a vulnerability in isolation, while SSVC incorporates exploitation activity, automatability, mission impact, and public safety context. SSVC produces actionable decisions rather than a numeric severity score.

Can I import Nessus or OpenVAS scan results for SSVC triage?▼

Yes, the processing script accepts Nessus CSV exports and OpenVAS XML reports via the --format flag. It parses scan findings, evaluates each CVE against the SSVC decision points, and outputs a JSON triage report.

What data sources does SSVC triage require?▼

The workflow uses the CISA Known Exploited Vulnerabilities catalog for exploitation status and the FIRST EPSS API for exploitation probability scores. An NVD API key is optional for higher rate limits when enriching CVE data.

Related Skills

Explore More Software Engineering Skills→
DCx7C5DCx7C5

nessusinfra-SKILL.md

Automate infrastructure vulnerability scans via the Nessus REST API.

Community
Advanced
UnitOneAIUnitOneAI
44

patch-prioritization

Prioritize vulnerability remediation patches using SSVC 2.1, EPSS v3, and CISA KEV.

Official
Intermediate
xalgordxalgord
954

triaging-vulnerabilities-with-ssvc-framework

Prioritize vulnerabilities using CISA's SSVC decision tree with KEV and EPSS data.

Community
Intermediate
GeneralReasoningGeneralReasoning
4

cvss-score-extraction

Extract CVSS v3/v3.1 scores from NVD, GHSA, and RedHat with v2 fallback.

Official
Advanced