How do I install the Cve Poc Generator skill?

Run npx skillmds@latest add 26zl/cve-poc-generator in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Cve Poc Generator safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Cve Poc Generator?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Cve Poc Generator free to use?

Yes. Installing skills from SkillMD is free. This skill is licensed under MIT.

Who published Cve Poc Generator?

26zl (@26zl) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Cve Poc Generator by 26zl — Agent Skill

Name: Cve Poc Generator
Author: 26zl

File contents

CVE PoC Generator

Research a CVE by ID, generate a standalone Python proof-of-concept script, and produce a detailed vulnerability report.

Workflow

NVD Lookup - Query NVD API v2.0 for the CVE ID. Extract CVSS v3.1 score/vector, CWE IDs, CPE matches, advisory URLs, and patch links.
Advisory Research - Deep-dive vendor advisories, GitHub security advisories, Exploit-DB, and published write-ups. Identify root cause, affected versions, and attack vector details.
PoC Generation - Write a standalone Python script (poc.py) that demonstrates the vulnerability safely. Follow the script standards in reference/poc-methodology.md.
Report Generation - Write a comprehensive markdown report (report.md) with metadata, root cause analysis, risk assessment, and remediation guidance.

NVD Data to Collect

Field	Source	Usage
CVE ID	NVD	Primary identifier
CVSS v3.1 Score + Vector	NVD	Risk scoring
CWE ID(s)	NVD	Vulnerability classification
CPE Matches	NVD	Affected products and versions
Advisory URLs	NVD references	Research sources
Patch Links	NVD references / vendor	Remediation guidance
Description	NVD	Vulnerability summary
Published / Modified dates	NVD	Timeline

Output

{OUTPUT_DIR}/
  artifacts/cve-pocs/CVE-XXXX-XXXXX/
    poc.py              # Standalone Python PoC script
  reports/cve-pocs/CVE-XXXX-XXXXX/
    report.md           # Detailed vulnerability report

Invocation

/cve-poc-generator CVE-2024-XXXXX

The skill accepts a single CVE ID as argument. Multiple CVEs should be processed with separate invocations.

Rules

Least harm - PoC scripts MUST demonstrate vulnerability without causing damage. Use detection/verification checks, not destructive payloads.
Standalone scripts - PoC must run independently with only standard Python libraries plus requests. No framework dependencies.
Accurate scoring - Use the exact CVSS score and vector from NVD. Do not fabricate or estimate scores.
Source attribution - Every claim in the report must cite its source (NVD, vendor advisory, CVE description).
No emoji - Use text severity labels only (CRITICAL, HIGH, MEDIUM, LOW, INFORMATIONAL).
Verified data only - Do not hallucinate CVE details. If NVD data is unavailable, state it explicitly.
Safe defaults - PoC scripts must default to read-only, non-destructive operations. Any potentially harmful action requires explicit --confirm flag.

---name: cve-poc-generatordescription: CVE research, standalone PoC script and report generation. Given a CVE ID, researches NVD and advisories, generates a safe Python PoC, and writes a detailed vulnerability report.license: MIT---# CVE PoC GeneratorResearch a CVE by ID, generate a standalone Python proof-of-concept script, and produce a detailed vulnerability report.## Workflow1. **NVD Lookup** - Query NVD API v2.0 for the CVE ID. Extract CVSS v3.1 score/vector, CWE IDs, CPE matches, advisory URLs, and patch links.2. **Advisory Research** - Deep-dive vendor advisories, GitHub security advisories, Exploit-DB, and published write-ups. Identify root cause, affected versions, and attack vector details.3. **PoC Generation** - Write a standalone Python script (`poc.py`) that demonstrates the vulnerability safely. Follow the script standards in `reference/poc-methodology.md`.4. **Report Generation** - Write a comprehensive markdown report (`report.md`) with metadata, root cause analysis, risk assessment, and remediation guidance.## NVD Data to Collect| Field | Source | Usage ||-------|--------|-------|| CVE ID | NVD | Primary identifier || CVSS v3.1 Score + Vector | NVD | Risk scoring || CWE ID(s) | NVD | Vulnerability classification || CPE Matches | NVD | Affected products and versions || Advisory URLs | NVD references | Research sources || Patch Links | NVD references / vendor | Remediation guidance || Description | NVD | Vulnerability summary || Published / Modified dates | NVD | Timeline |## Output```{OUTPUT_DIR}/ artifacts/cve-pocs/CVE-XXXX-XXXXX/ poc.py # Standalone Python PoC script reports/cve-pocs/CVE-XXXX-XXXXX/ report.md # Detailed vulnerability report```## Invocation```/cve-poc-generator CVE-2024-XXXXX```The skill accepts a single CVE ID as argument. Multiple CVEs should be processed with separate invocations.## Rules1. **Least harm** - PoC scripts MUST demonstrate vulnerability without causing damage. Use detection/verification checks, not destructive payloads.2. **Standalone scripts** - PoC must run independently with only standard Python libraries plus `requests`. No framework dependencies.3. **Accurate scoring** - Use the exact CVSS score and vector from NVD. Do not fabricate or estimate scores.4. **Source attribution** - Every claim in the report must cite its source (NVD, vendor advisory, CVE description).5. **No emoji** - Use text severity labels only (CRITICAL, HIGH, MEDIUM, LOW, INFORMATIONAL).6. **Verified data only** - Do not hallucinate CVE details. If NVD data is unavailable, state it explicitly.7. **Safe defaults** - PoC scripts must default to read-only, non-destructive operations. Any potentially harmful action requires explicit `--confirm` flag.

Frequently asked questions

Cve Poc Generator