Agent skills that use Vulnerability-Lookup, in the
Agent Skills format (SKILL.md), which Claude Code and other coding agents can load.
| Skill | What it does |
|---|---|
| vulnerability-lookup | Triage a vulnerability or a dependency alert: CVSS, EPSS, KEV catalogues, sightings, VEX, linked advisories and fixed versions, then a patch priority |
Copy a skill directory where your agent looks for skills, for example for Claude Code:
cp -r skills/vulnerability-lookup ~/.claude/skills/ # for you
cp -r skills/vulnerability-lookup .claude/skills/ # for one projectThe helper script needs Python 3.8 or later and nothing else. It queries the public
instance by default; set VULNERABILITY_LOOKUP_URL to use your own.
The triage report follows the fields that ENISA's secure-package-consumption skill asks for a vulnerability alert (severity, EPSS, KEV, reachability, VEX status, remediation).
These skills are free software released under the "GNU Affero General Public License v3.0", or (at your option) any later version. See LICENSE.md.
Copyright (c) 2026 Computer Incident Response Center Luxembourg (CIRCL)
Copyright (c) 2026 Cédric Bonhomme - https://github.com/cedricbonhomme