CVE/CWE Database Skill

CVE and CWE database querying and management

509 stars

Best use case

CVE/CWE Database Skill is best used when you need a repeatable AI agent workflow instead of a one-off prompt.

CVE and CWE database querying and management

Teams using CVE/CWE Database Skill should expect a more consistent output, faster repeated execution, less prompt rewriting.

When to use this skill

You want a reusable workflow that can be run more than once with consistent structure.

When not to use this skill

You only need a quick one-off answer and do not need a reusable workflow.
You cannot install or maintain the underlying files, dependencies, or repository context.

Installation

Claude Code / Cursor / Codex

$curl -o ~/.claude/skills/cve-cwe-db/SKILL.md --create-dirs "https://raw.githubusercontent.com/a5c-ai/babysitter/main/library/specializations/security-research/skills/cve-cwe-db/SKILL.md"

Manual Installation

Download SKILL.md from GitHub
Place it in .claude/skills/cve-cwe-db/SKILL.md inside your project
Restart your AI agent — it will auto-discover the skill

How CVE/CWE Database Skill Compares

Feature / Agent	CVE/CWE Database Skill	Standard Approach
Platform Support	Not specified	Limited / Varies
Context Awareness	High	Baseline
Installation Complexity	Unknown	N/A

Frequently Asked Questions

What does this skill do?

CVE and CWE database querying and management

Where can I find the source code?

You can find the source code on GitHub using the link provided at the top of the page.

SKILL.md Source

# CVE/CWE Database Skill

## Overview

This skill provides CVE and CWE database querying, CVSS scoring, and vulnerability management capabilities.

## Capabilities

- Query NVD for CVE details
- Search CWE database for weaknesses
- Calculate CVSS scores (v2, v3.1, v4)
- Generate CVE request templates
- Track CVE assignment status
- Map vulnerabilities to CWE
- Generate vulnerability advisories
- Support CPE matching

## Target Processes

- vulnerability-root-cause-analysis.js
- responsible-disclosure.js
- security-advisory-writing.js
- variant-analysis.js

## Dependencies

- NVD API access
- CWE database (local or API)
- cvss library (Python)
- Python 3.x

## Usage Context

This skill is essential for:
- Vulnerability classification
- CVSS score calculation
- CVE request preparation
- Advisory writing
- Vulnerability tracking

## Integration Notes

- Supports NVD API v2
- Can cache CVE data locally
- Integrates with vulnerability management systems
- Supports CPE-based vulnerability matching
- Can generate machine-readable advisories (CSAF)

Related Skills

Room Database

509

from a5c-ai/babysitter

Expert skill for Android Room persistence library

materials-database-querier

509

from a5c-ai/babysitter

Materials database query skill for accessing structure and property data from multiple repositories

cost-database-interface

509

from a5c-ai/babysitter

Construction cost database interface skill for unit costs, productivity, and regional adjustments

aero-database

509

from a5c-ai/babysitter

Systematic generation and management of aerodynamic coefficient databases

media-database

509

from a5c-ai/babysitter

Journalist database access and media outreach automation

process-builder

509

from a5c-ai/babysitter

Scaffold new babysitter process definitions following SDK patterns, proper structure, and best practices. Guides the 3-phase workflow from research to implementation.

Workflow & Productivity

babysitter

509

from a5c-ai/babysitter

Orchestrate via @babysitter. Use this skill when asked to babysit a run, orchestrate a process or whenever it is called explicitly. (babysit, babysitter, orchestrate, orchestrate a run, workflow, etc.)