vuln-intel SKILL.md skillA
vuln-intel from perrylink/dsh-skill-pack-security is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add perrylink/dsh-skill-pack-security/vuln-intel@v2.2.25Pins v2.2.25 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- perrylink/dsh-skill-pack-security
- Path
skills/vuln-intel/SKILL.md- Versions recorded
- 13
- Latest version
- v2.2.25, committed Oct 31, 2026
- First version recorded
- Sep 7, 2026
- Size
- 6,051 bytes
- Repository stars
- 22
- License
- Apache-2.0
漏洞情报检索与判定：NVD/CISA-KEV/GHSA/OSV 四处权威源的查询命令、响应解读与误判判据，把 CVE/GHSA 编号变成"是否在野利用 × 是否影响本项目"的带证据结论。给定 CVE/GHSA 编号查详情与影响、判断在野利用状态或写漏洞简报时用；无编号的泛漏洞科普不展开。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 漏洞情报（vuln-intel）
目标：把一个漏洞编号变成**每条都有出处命令**的风险结论。只转述来源数据（severity 照抄 NVD/GHSA，不自行推断）；结论结构 = 编号 + 严重性 + 是否在野利用 + 是否影响本项目 + 修复建议。
## 1. 工具就绪与速率限制
```sh
curl --version; jq --version; gh --version
```
样例输出：`curl 8.9.1` / `jq-1.7.1` / `gh version 2.61.0`。
判据：curl 与 jq 必须可用（所有查询都是 curl+jq）；`gh` 可选（仅第 4 节认证查询用）。无 key 速率限制：NVD 每 30 秒约 5 次、GitHub API 每小时 60 次——批量查询时每请求间隔 6 秒，超限会收到 403/429，那是限流不是"漏洞不存在"。
## 2. NVD（CVE 基线：描述、CVSS、参考链接）
```sh
curl -s 'https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2024-1234' | jq '.vulnerabilities[0].cve | {id, published, lastModified, metrics, references: [.references[].url]}'
```
样例输出（以实际输出为准）：
```json
{ "id": "CVE-2024-1234", "published": "2024-03-01T00:00:00.000", "lastModified": "2024-06-01T00:00:00.000", "metrics": { "cvssMetricV31": [ { "cvssData": { "baseSeverity": "HIGH", "baseScore": 8.1 } } ] }, "references": ["https://github.com/example/example-lib/security/advisories/GHSA-xxxx-yyyy-zzzz"] }
```
判据：`vulnerabilities` 数组为空 = 编号不存在或拼错，先复核编号再下结论；CVSS 只照抄 `baseScore`/`baseSeverity`，禁止自己换算；`lastModified` 比 `published` 晚很多 = 条目被更新过，以最新为准。
## 3. CISA KEV（在野利用的唯一权威判据）
```sh
…Read the whole file at its exact version.
How to install
mdr add perrylink/dsh-skill-pack-security/vuln-intel@sha256:9444ae270ceaf116The line at the top of this page pins the label v2.2.25, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_7lqwzthonqluaud6)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 13 versions of this file, between Sep 7, 2026 and Oct 31, 2026, about one every 5 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v2.2.25 latest | 2026-10-31 | af6b35f | 6,051 B | A | view · diff |
| v2.2.24 | 2026-10-10 | 0c1deb8 | 6,051 B | A | view · diff |
| v2.2.23 | 2026-10-10 | a5f8d45 | 6,051 B | A | view · diff |
| v2.2.22 | 2026-10-05 | 008bf2e | 6,051 B | A | view · diff |
| v2.2.20 | 2026-10-05 | 6b2adfe | 6,051 B | A | view · diff |
| v2.2.19 | 2026-10-04 | 380880e | 6,051 B | A | view · diff |
| v2.2.18 | 2026-10-04 | 8761f0d | 6,051 B | A | view · diff |
| v2.2.17 | 2026-09-24 | f926448 | 6,051 B | A | view · diff |
| v2.2.16 | 2026-09-12 | 8e74c4d | 6,051 B | A | view · diff |
| v2.2.14 | 2026-09-10 | d6120c8 | 6,051 B | A | view · diff |
| v2.2.13 | 2026-09-09 | 6ffdda7 | 6,051 B | A | view · diff |
| v2.2.12 | 2026-09-09 | dd3da11 | 6,051 B | A | view · diff |
| v2.2.10 | 2026-09-07 | 4430c52 | 6,051 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (6051 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
perrylink/dsh-skill-pack-security · 22 stars · license Apache-2.0 · pushed 2026-11-01 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_7lqwzthonqluaud6 GET https://markdownregistry.com/api/v1/resolve?ref=perrylink/dsh-skill-pack-security/vuln-intel GET https://markdownregistry.com/api/v1/blob/9444ae270ceaf1166f39fb4010c78d15ea368227dbd7ee33ba2cf6c03fb8d756
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from perrylink/dsh-skill-pack-security
Every file in perrylink/dsh-skill-pack-security