# Cve Lookup

> Look up CVE IDs in the official CVEListV5 repository. Fetches JSON records, extracts description, CWE, vendor/product, CVSS, and classifies business logic relevance. Use when verifying CVE entries or enriching CVE datasets.

- Skill: `aibot88/cve-lookup` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add aibot88/cve-lookup`
- Raw SKILL.md: https://api.skillmd.com/api/skills/aibot88/cve-lookup/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: aibot88 (https://skillmd.com/u/aibot88)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/aibot88/cve-lookup

---


# cve-lookup — CVEListV5 Record Fetcher

## Step 1: Fetch CVE records

```bash
python3 ${CLAUDE_SKILL_DIR}/../../scripts/fetch.py $ARGUMENTS
```

Output: JSON array. Each record contains:
- `cve_id`, `state`, `description`, `cwe`, `vendor`, `product`, `versions`, `cvss_score`, `cvss_severity`, `references`
- `match`: `YES` | `LIKELY` | `PARTIAL` | `NO` | `ERROR`
- `error` (present only on fetch failure)

## Step 2: Present results

For each record:

```
## {cve_id}

- **State**: {state}
- **Vendor**: {vendor}
- **Product**: {product}
- **Versions**: {versions joined}
- **Description**: {description}
- **CWE**: {cwe}
- **CVSS**: {cvss_score} / {cvss_severity}
- **Match**: {match}
- **References**:
  - {each reference URL}
```

For error records: `## {cve_id} — NOT FOUND ({error})`

## Step 3: Summary table

```
| CVE ID | State | Vendor/Product | CWE | CVSS | Match |
```

## Step 4: Analysis (agent reasoning)

Only if the user's context suggests verification against an existing dataset:
- Compare fetched vendor/product against the dataset's `platform` column.
- Flag mismatches between fetched CWE and dataset CWE.
- Recommend additions or removals based on `match` classification.