cve-exploitability-triage
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches vulnerability enrichment data from trusted and well-known sources. It downloads the Known Exploited Vulnerabilities (KEV) catalog from CISA (cisa.gov) and Exploit Prediction Scoring System (EPSS) data from FIRST.org and Empirical Security. These are standard authoritative sources for security professionals.- [COMMAND_EXECUTION]: The instructions involve using common command-line utilities such as curl, gunzip, grep, and jq to retrieve and parse structured security feeds. It also references the use of code analysis tools like govulncheck and knip to assess vulnerability reachability. All commands are used according to best practices for data processing and static analysis.
Audit Metadata