Vulnerability Report Skill

When generating vulnerability reports, scan all project dependencies for known CVEs, categorize findings by severity, and produce three separate reports — one for each severity tier. Each report is a standalone document with full context, remediation steps, and priority guidance.

IMPORTANT: Always save THREE markdown files to the project-decisions/ directory:

1. YYYY-MM-DD-vulnerabilities-high.md — Critical and High severity (CVSS ≥ 7.0)
2. YYYY-MM-DD-vulnerabilities-medium.md — Medium severity (CVSS 4.0–6.9)
3. YYYY-MM-DD-vulnerabilities-low.md — Low and Informational (CVSS < 4.0)

0. Output Setup

mkdir -p project-decisions

# Files will be saved as:
# project-decisions/YYYY-MM-DD-vulnerabilities-high.md
# project-decisions/YYYY-MM-DD-vulnerabilities-medium.md
# project-decisions/YYYY-MM-DD-vulnerabilities-low.md