# Vulnerability Assessment Skill

> Vulnerability Assessment Skill

- Skill: `majiayu000/vulnerability-assessment-skill` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add majiayu000/vulnerability-assessment-skill`
- Raw SKILL.md: https://api.skillmd.com/api/skills/majiayu000/vulnerability-assessment-skill/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: majiayu000 (https://skillmd.com/u/majiayu000)
- Updated: 2026-09-21
- Page: https://skillmd.com/skills/majiayu000/vulnerability-assessment-skill

---


# Vulnerability Assessment Skill

=== PURPOSE ===

Procedures for scanning dependencies and assessing vulnerabilities.

=== USED BY ===

| Agent | Purpose |
|-------|---------|
| @agent(security-lead) @ref(CB-AGENT-SECURITY-001) | Primary skill for vulnerability work |

=== PROCEDURE: Dependency Scan ===

**Steps:**
1. Run `npm audit` or equivalent
2. Review findings by severity
3. Document Critical/High findings
4. Create issues for remediation
5. Track CVE references

**Severity Priority:**
- Critical: Fix immediately
- High: Fix within 24 hours
- Medium: Fix within 1 week
- Low: Track for next release

=== PROCEDURE: CVE Tracking ===

Document each CVE:
- CVE ID
- Affected package
- Severity score (CVSS)
- Remediation status

=== RELATED SKILLS ===

| Skill | Relationship |
|-------|--------------|
| @skill(security-review) | Review context |
| @skill(compliance-check) | Compliance implications |